Lucene search

[email protected]CVE-2017-17330

HistoryMar 09, 2018 - 5:29 p.m.

CVE-2017-17330

2018-03-0917:29:00

CWE-772

[email protected]

web.nvd.nist.gov

huawei

ar3200

v200r005c32

v200r006c10

v200r006c11

v200r007c00

v200r007c01

v200r007c02

v200r008c00

v200r008c10

v200r008c20

v200r008c30

ngfw

module

v500r001c00

v500r001c20

v500r002c00

memory leak

vulnerability

xml

nvd

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.2 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

12.1%

JSON

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.

CPENameOperatorVersion
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r005c32
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r006c10
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r006c11
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r007c00
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r007c01
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r007c02
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r008c00
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r008c10
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r008c20
huawei:ar3200_firmwarehuawei ar3200 firmwareeqv200r008c30

CPE	Name	Operator	Version
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r005c32
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r006c10
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r006c11
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r007c00
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r007c01
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r007c02
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r008c00
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r008c10
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r008c20
huawei:ar3200_firmware	huawei ar3200 firmware	eq	v200r008c30

Rows per page:

1-10 of 131

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-en

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.2 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

12.1%

JSON

Related for CVE-2017-17330

cvelist1 huawei1 prion1 openvas2