Input validation

2017-12-2217:29:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

JSON

Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart.

CPENameOperatorVersion
s5700_firmwareeq200r5c0-v
s6700_firmwareeq200r5c0-v

CPE	Name	Operator	Version
	s5700_firmware	eq	200r5c0-v
	s6700_firmware	eq	200r5c0-v

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en