Out-of-bounds

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.6%

JSON

MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.

CPENameOperatorVersion
max_presence_firmwareeq100r1c0-v
tp3106_firmwareeq100r2c0-v
tp3206_firmwareeq100r2c0-v

Name	Operator	Version
max_presence_firmware	eq	100r1c0-v
tp3106_firmware	eq	100r2c0-v
tp3206_firmware	eq	100r2c0-v

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en

www.securityfocus.com/bid/101948