Security Advisory - Buffer Error Vulnerability in Some Huawei Products

There is a buffer overflow vulnerability in the SCCP (Signalling Connection Control Part) module of some Huawei products. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08246)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-17282.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sccp-en