Lucene search

[email protected]NVD:CVE-2017-15317

HistoryDec 22, 2017 - 5:29 p.m.

CVE-2017-15317

2017-12-2217:29:13

CWE-125

[email protected]

web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

59.2%

JSON

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.

Affected configurations

NVD

Node

huaweiar120-s_firmwareMatchv200r006c10

huaweiar120-s_firmwareMatchv200r007c00

huaweiar120-s_firmwareMatchv200r008c20

huaweiar120-s_firmwareMatchv200r008c30

AND

huaweiar120-sMatch-

Node

huaweiar1200_firmwareMatchv200r006c10

huaweiar1200_firmwareMatchv200r006c13

huaweiar1200_firmwareMatchv200r007c00

huaweiar1200_firmwareMatchv200r007c01

huaweiar1200_firmwareMatchv200r007c02

huaweiar1200_firmwareMatchv200r008c20

huaweiar1200_firmwareMatchv200r008c30

AND

huaweiar1200Match-

Node

huaweiar1200-s_firmwareMatchv200r006c10

huaweiar1200-s_firmwareMatchv200r007c00

huaweiar1200-s_firmwareMatchv200r008c20

huaweiar1200-s_firmwareMatchv200r008c30

AND

huaweiar1200-sMatch-

Node

huaweiar150_firmwareMatchv200r006c10

huaweiar150_firmwareMatchv200r007c00

huaweiar150_firmwareMatchv200r007c01

huaweiar150_firmwareMatchv200r007c02

huaweiar150_firmwareMatchv200r008c20

huaweiar150_firmwareMatchv200r008c30

AND

huaweiar150Match-

Node

huaweiar150-s_firmwareMatchv200r006c10

huaweiar150-s_firmwareMatchv200r007c00

huaweiar150-s_firmwareMatchv200r008c20

huaweiar150-s_firmwareMatchv200r008c30

AND

huaweiar150-sMatch-

Node

huaweiar160_firmwareMatchv200r006c10

huaweiar160_firmwareMatchv200r006c12

huaweiar160_firmwareMatchv200r007c00

huaweiar160_firmwareMatchv200r007c01

huaweiar160_firmwareMatchv200r007c02

huaweiar160_firmwareMatchv200r008c20

huaweiar160_firmwareMatchv200r008c30

AND

huaweiar160Match-

Node

huaweiar200_firmwareMatchv200r006c10

huaweiar200_firmwareMatchv200r007c00

huaweiar200_firmwareMatchv200r007c01

huaweiar200_firmwareMatchv200r008c20

huaweiar200_firmwareMatchv200r008c30

AND

huaweiar200Match-

Node

huaweiar200-s_firmwareMatchv200r006c10

huaweiar200-s_firmwareMatchv200r007c00

huaweiar200-s_firmwareMatchv200r008c20

huaweiar200-s_firmwareMatchv200r008c30

AND

huaweiar200-sMatch-

Node

huaweiar2200_firmwareMatchv200r006c10

huaweiar2200_firmwareMatchv200r006c13

huaweiar2200_firmwareMatchv200r006c16

huaweiar2200_firmwareMatchv200r007c00

huaweiar2200_firmwareMatchv200r007c01

huaweiar2200_firmwareMatchv200r007c02

huaweiar2200_firmwareMatchv200r008c20

huaweiar2200_firmwareMatchv200r008c30

AND

huaweiar2200Match-

Node

huaweiar2200-s_firmwareMatchv200r006c10

huaweiar2200-s_firmwareMatchv200r007c00

huaweiar2200-s_firmwareMatchv200r008c20

huaweiar2200-s_firmwareMatchv200r008c30

AND

huaweiar2200-sMatch-

Node

huaweiar3200_firmwareMatchv200r006c10

huaweiar3200_firmwareMatchv200r006c11

huaweiar3200_firmwareMatchv200r007c00

huaweiar3200_firmwareMatchv200r007c01

huaweiar3200_firmwareMatchv200r007c02

huaweiar3200_firmwareMatchv200r008c00

huaweiar3200_firmwareMatchv200r008c10

huaweiar3200_firmwareMatchv200r008c20

huaweiar3200_firmwareMatchv200r008c30

AND

huaweiar3200Match-

Node

huaweiar510_firmwareMatchv200r006c10

huaweiar510_firmwareMatchv200r006c12

huaweiar510_firmwareMatchv200r006c13

huaweiar510_firmwareMatchv200r006c15

huaweiar510_firmwareMatchv200r006c16

huaweiar510_firmwareMatchv200r006c17

huaweiar510_firmwareMatchv200r007c00

huaweiar510_firmwareMatchv200r008c20

huaweiar510_firmwareMatchv200r008c30

AND

huaweiar510Match-

Node

huaweisrg1300_firmwareMatchv200r006c10

huaweisrg1300_firmwareMatchv200r007c00

huaweisrg1300_firmwareMatchv200r007c02

huaweisrg1300_firmwareMatchv200r008c20

huaweisrg1300_firmwareMatchv200r008c30

AND

huaweisrg1300Match-

Node

huaweisrg2300_firmwareMatchv200r006c10

huaweisrg2300_firmwareMatchv200r007c00

huaweisrg2300_firmwareMatchv200r007c02

huaweisrg2300_firmwareMatchv200r008c20

huaweisrg2300_firmwareMatchv200r008c30

AND

huaweisrg2300Match-

Node

huaweisrg3300_firmwareMatchv200r006c10

huaweisrg3300_firmwareMatchv200r007c00

huaweisrg3300_firmwareMatchv200r008c20

huaweisrg3300_firmwareMatchv200r008c30

AND

huaweisrg3300Match-

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

59.2%

JSON

Related for NVD:CVE-2017-15317

cve1 prion1 huawei1 openvas1 cvelist1