Huawei Data Communication: Buffer Overflow Vulnerability in Some Huawei Products (huawei-sa-20171213-01-buffer)

There is a buffer overflow vulnerability in the Common Open Policy Service Protocol COPS module of some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-15350

The CVE-2017-15350 entry concerns a buffer overflow in the Common Open Policy Service (COPS) module of Huawei devices (e.g., DP300, USG/NGFW modules, NIP/TP/V series, TE/TP lines, etc.). Root cause: insufficient input validation on COPS messages, allowing an unauthenticated, remote attacker to se...