Lucene search

[email protected]NVD:CVE-2017-15341

HistoryFeb 15, 2018 - 4:29 p.m.

CVE-2017-15341

2018-02-1516:29:00

CWE-295

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

59.1%

JSON

Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE50 V600R006C00, TE60 V600R006C00 have a denial of service vulnerability. The software decodes X.509 certificate in an improper way. A remote unauthenticated attacker could send a crafted X.509 certificate to the device. Successful exploit could result in a denial of service on the device.

Affected configurations

Nvd

Node

huaweiar3200_firmwareMatchv200r008c20

huaweiar3200_firmwareMatchv200r008c30

AND

huaweiar3200Match-

Node

huaweite40_firmwareMatchv600r006c00

AND

huaweite40Match-

Node

huaweite50_firmwareMatchv600r006c00

AND

huaweite50Match-

Node

huaweite60_firmwareMatchv600r006c00

AND

huaweite60Match-

VendorProductVersionCPE
huaweiar3200_firmwarev200r008c20cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*
huaweiar3200_firmwarev200r008c30cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*
huaweiar3200-cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*
huaweite40_firmwarev600r006c00cpe:2.3:o:huawei:te40_firmware:v600r006c00:*:*:*:*:*:*:*
huaweite40-cpe:2.3:h:huawei:te40:-:*:*:*:*:*:*:*
huaweite50_firmwarev600r006c00cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:*
huaweite50-cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:*
huaweite60_firmwarev600r006c00cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:*
huaweite60-cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	ar3200_firmware	v200r008c20	cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:::::::*
huawei	ar3200_firmware	v200r008c30	cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:::::::*
huawei	ar3200	-	cpe:2.3:h:huawei:ar3200:-:::::::*
huawei	te40_firmware	v600r006c00	cpe:2.3:o:huawei:te40_firmware:v600r006c00:::::::*
huawei	te40	-	cpe:2.3:h:huawei:te40:-:::::::*
huawei	te50_firmware	v600r006c00	cpe:2.3:o:huawei:te50_firmware:v600r006c00:::::::*
huawei	te50	-	cpe:2.3:h:huawei:te50:-:::::::*
huawei	te60_firmware	v600r006c00	cpe:2.3:o:huawei:te60_firmware:v600r006c00:::::::*
huawei	te60	-	cpe:2.3:h:huawei:te60:-:::::::*

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-cert-en

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

59.1%

JSON

Related for NVD:CVE-2017-15341

cvelist1 prion1 cve1 huawei1