CVE-2017-15317

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

CVE-2017-15317

CVE-2017-15317 is an input-validation vulnerability in Huawei products (e.g., AR120-S, AR1200, AR150, AR160, AR200, AR2200, SRG series, etc.) where insufficient SCTP input validation allows an unauthenticated remote attacker to craft malformed SCTP packets that trigger out-of-bounds reads and dev...

Security Advisory - Input Validation Vulnerability in Multiple Huawei Products

There is an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol SCTP packet and send it to the device, causing the device to read out of bounds and...