CVE-2017-17286

🗓️ 15 Feb 2018 16:29:02Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 15 Views

Huawei products have an out-of-bound write vulnerability due to insufficient input validation, allowing a remote attacker to craft encryption key and cause buffer overflow

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2017-17286	15 Feb 201816:00	–	cve
Cvelist	CVE-2017-17286	15 Feb 201816:00	–	cvelist
EUVD	EUVD-2017-8452	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Two Buffer Overflow Vulnerabilities in Some Huawei Products	7 Feb 201800:00	–	huawei
OpenVAS	Huawei Data Communication: Two Buffer Overflow Vulnerabilities in Some Huawei Products (huawei-sa-20180207-01-encryption)	26 May 202000:00	–	openvas
Prion	Input validation	15 Feb 201816:29	–	prion

NVD

Node

huawei ar120-s_firmwareMatchv200r005c32

OR

huawei ar120-s_firmwareMatchv200r006c10

OR

huawei ar120-s_firmwareMatchv200r007c00

OR

huawei ar120-s_firmwareMatchv200r008c20

OR

huawei ar120-s_firmwareMatchv200r008c30

AND

huawei ar120-sMatch-

Node

huawei ar1200_firmwareMatchv200r005c32

OR

huawei ar1200_firmwareMatchv200r006c10

OR

huawei ar1200_firmwareMatchv200r007c00

OR

huawei ar1200_firmwareMatchv200r007c01

OR

huawei ar1200_firmwareMatchv200r007c02

OR

huawei ar1200_firmwareMatchv200r008c20

OR

huawei ar1200_firmwareMatchv200r008c30

AND

huawei ar1200Match-

Node

huawei ar1200-s_firmwareMatchv200r005c32

OR

huawei ar1200-s_firmwareMatchv200r006c10

OR

huawei ar1200-s_firmwareMatchv200r007c00

OR

huawei ar1200-s_firmwareMatchv200r008c20

OR

huawei ar1200-s_firmwareMatchv200r008c30

AND

huawei ar1200-sMatch-

Node

huawei ar150_firmwareMatchv200r005c32

OR

huawei ar150_firmwareMatchv200r006c10

OR

huawei ar150_firmwareMatchv200r007c00

OR

huawei ar150_firmwareMatchv200r007c01

OR

huawei ar150_firmwareMatchv200r007c02

OR

huawei ar150_firmwareMatchv200r008c20

OR

huawei ar150_firmwareMatchv200r008c30

AND

huawei ar150Match-

Node

huawei ar150-s_firmwareMatchv200r005c32

OR

huawei ar150-s_firmwareMatchv200r007c00

OR

huawei ar150-s_firmwareMatchv200r008c20

OR

huawei ar150-s_firmwareMatchv200r008c30

AND

huawei ar150-sMatch-

Node

huawei ar160_firmwareMatchv200r005c32

OR

huawei ar160_firmwareMatchv200r006c10

OR

huawei ar160_firmwareMatchv200r007c00

OR

huawei ar160_firmwareMatchv200r007c01

OR

huawei ar160_firmwareMatchv200r007c02

OR

huawei ar160_firmwareMatchv200r008c20

OR

huawei ar160_firmwareMatchv200r008c30

AND

huawei ar160Match-

Node

huawei ar200_firmwareMatchv200r005c32

OR

huawei ar200_firmwareMatchv200r006c10

OR

huawei ar200_firmwareMatchv200r007c00

OR

huawei ar200_firmwareMatchv200r007c01

OR

huawei ar200_firmwareMatchv200r008c20

OR

huawei ar200_firmwareMatchv200r008c30

AND

huawei ar200Match-

Node

huawei ar200-s_firmwareMatchv200r005c32

OR

huawei ar200-s_firmwareMatchv200r006c10

OR

huawei ar200-s_firmwareMatchv200r007c00

OR

huawei ar200-s_firmwareMatchv200r008c20

OR

huawei ar200-s_firmwareMatchv200r008c30

AND

huawei ar200-sMatch-

Node

huawei ar2200_firmwareMatchv200r006c10

OR

huawei ar2200_firmwareMatchv200r007c00

OR

huawei ar2200_firmwareMatchv200r007c01

OR

huawei ar2200_firmwareMatchv200r007c02

OR

huawei ar2200_firmwareMatchv200r008c20

OR

huawei ar2200_firmwareMatchv200r008c30

AND

huawei ar2200Match-

Node

huawei ar2200-s_firmwareMatchv200r005c32

OR

huawei ar2200-s_firmwareMatchv200r006c10

OR

huawei ar2200-s_firmwareMatchv200r007c00

OR

huawei ar2200-s_firmwareMatchv200r008c20

OR

huawei ar2200-s_firmwareMatchv200r008c30

AND

huawei ar2200-sMatch-

Node

huawei ar3200_firmwareMatchv200r005c32

OR

huawei ar3200_firmwareMatchv200r006c10

OR

huawei ar3200_firmwareMatchv200r006c11

OR

huawei ar3200_firmwareMatchv200r007c00

OR

huawei ar3200_firmwareMatchv200r007c01

OR

huawei ar3200_firmwareMatchv200r007c02

OR

huawei ar3200_firmwareMatchv200r008c00

OR

huawei ar3200_firmwareMatchv200r008c10

OR

huawei ar3200_firmwareMatchv200r008c20

OR

huawei ar3200_firmwareMatchv200r008c30

AND

huawei ar3200Match-

Node

huawei ar3600_firmwareMatchv200r006c10

OR

huawei ar3600_firmwareMatchv200r007c00

OR

huawei ar3600_firmwareMatchv200r007c01

OR

huawei ar3600_firmwareMatchv200r008c20

AND

huawei ar3600Match-

Node

huawei ar510_firmwareMatchv200r005c32

OR

huawei ar510_firmwareMatchv200r006c10

OR

huawei ar510_firmwareMatchv200r007c00

OR

huawei ar510_firmwareMatchv200r008c20

OR

huawei ar510_firmwareMatchv200r008c30

AND

huawei ar510Match-

Node

huawei netengine16ex_firmwareMatchv200r005c32

OR

huawei netengine16ex_firmwareMatchv200r006c10

OR

huawei netengine16ex_firmwareMatchv200r007c00

OR

huawei netengine16ex_firmwareMatchv200r008c20

OR

huawei netengine16ex_firmwareMatchv200r008c30

AND

huawei netengine16exMatch-

Node

huawei srg1300_firmwareMatchv200r005c32

OR

huawei srg1300_firmwareMatchv200r006c10

OR

huawei srg1300_firmwareMatchv200r007c00

OR

huawei srg1300_firmwareMatchv200r007c02

OR

huawei srg1300_firmwareMatchv200r008c20

OR

huawei srg1300_firmwareMatchv200r008c30

AND

huawei srg1300Match-

Node

huawei srg2300_firmwareMatchv200r005c32

OR

huawei srg2300_firmwareMatchv200r006c10

OR

huawei srg2300_firmwareMatchv200r007c00

OR

huawei srg2300_firmwareMatchv200r007c02

OR

huawei srg2300_firmwareMatchv200r008c20

OR

huawei srg2300_firmwareMatchv200r008c30

AND

huawei srg2300Match-

Node

huawei srg3300_firmwareMatchv200r005c32

OR

huawei srg3300_firmwareMatchv200r006c10

OR

huawei srg3300_firmwareMatchv200r007c00

OR

huawei srg3300_firmwareMatchv200r008c20

OR

huawei srg3300_firmwareMatchv200r008c30

AND

huawei srg3300Match-

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-encryption-en

21 Nov 2024 03:17Current

5.4Medium risk

Vulners AI Score5.4

CVSS 25

CVSS 35.3

EPSS0.00087

huawei out-of-bound write insufficient input validation remote attacker encryption key buffer overflow