Integer overflow

2018-02-1516:29:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

59.2%

JSON

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could system reboot.

CPENameOperatorVersion
ar120-s_firmwareeq200r6c10-v
ar120-s_firmwareeq200r7c0-v
ar120-s_firmwareeq200r8c20-v
ar120-s_firmwareeq200r8c30-v
ar1200_firmwareeq200r7c1-v
ar1200_firmwareeq200r7c2-v
ar3200_firmwareeq200r6c11-v
ar3200_firmwareeq200r8c0-v
ar3200_firmwareeq200r8c10-v

Name	Operator	Version
ar120-s_firmware	eq	200r6c10-v
ar120-s_firmware	eq	200r7c0-v
ar120-s_firmware	eq	200r8c20-v
ar120-s_firmware	eq	200r8c30-v
ar1200_firmware	eq	200r7c1-v
ar1200_firmware	eq	200r7c2-v
ar3200_firmware	eq	200r6c11-v
ar3200_firmware	eq	200r8c0-v
ar3200_firmware	eq	200r8c10-v

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-sctp-en

0.002 Low

EPSS

Percentile

59.2%

JSON

Related for PRION:CVE-2017-15343