Lucene search

Huawei TechnologiesHUAWEI-SA-20171201-01-PSE

HistoryDec 01, 2017 - 12:00 a.m.

Security Advisory - DoS Vulnerability in Some Huawei Products

2017-12-0100:00:00

Huawei Technologies

www.huawei.com

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

12.6%

JSON

There is a DoS vulnerability caused by memory exhaustion in some Huawei products. For insufficient input validation, attackers can craft and send some malformed messages to the target device to exhaust the memory of the device and cause a Denial of Service (DoS). (Vulnerability ID: HWPSIRT-2016-12104)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-15323.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-pse-en

Affected configurations

Vulners

Node

huaweidp300_firmwareMatchv500r002c00

huaweinip6600_firmwareMatchv500r001c00

huaweinip6600_firmwareMatchv500r001c20

huaweinip6600_firmwareMatchv500r001c30

huaweisecospace_usg6500_firmwareMatchv500r001c00

huaweisecospace_usg6500_firmwareMatchv500r001c20

huaweisecospace_usg6500_firmwareMatchv500r001c30

huaweisecospace_usg6600_firmwareMatchv500r001c00

huaweisecospace_usg6600_firmwareMatchv500r001c20

huaweisecospace_usg6600_firmwareMatchv500r001c30

huaweisecospace_usg6600_firmwareMatchv500r001c50

huaweite60_firmwareMatchv100r001c01

huaweite60_firmwareMatchv100r001c10

huaweite60_firmwareMatchv100r003c00

huaweite60_firmwareMatchv500r002c00

huaweite60_firmwareMatchv600r006c00

huaweitp3106_firmwareMatchv100r001c06

huaweitp3106_firmwareMatchv100r002c00

huaweiusg9500_firmwareMatchv500r001c00

huaweiusg9500_firmwareMatchv500r001c20

huaweiusg9500_firmwareMatchv500r001c30

huaweivp9660_firmwareMatchv200r001c02

huaweivp9660_firmwareMatchv200r001c30

huaweivp9660_firmwareMatchv500r002c00

huaweivp9660_firmwareMatchv500r002c10

huaweiviewpoint_8660_firmwareMatchv100r008c03

huaweiviewpoint_9030_firmwareMatchv100r011c02

huaweiviewpoint_9030_firmwareMatchv100r011c03

huaweiecns210_td_firmwareMatchv100r004c10

huaweiespace_u1981_firmwareMatchv200r003c30

VendorProductVersionCPE
huaweidp300_firmwarev500r002c00cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*
huaweinip6600_firmwarev500r001c00cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*
huaweinip6600_firmwarev500r001c20cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*
huaweinip6600_firmwarev500r001c30cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*
huaweisecospace_usg6500_firmwarev500r001c00cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*
huaweisecospace_usg6500_firmwarev500r001c20cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*
huaweisecospace_usg6500_firmwarev500r001c30cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*
huaweisecospace_usg6600_firmwarev500r001c00cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*
huaweisecospace_usg6600_firmwarev500r001c20cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*
huaweisecospace_usg6600_firmwarev500r001c30cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	dp300_firmware	v500r002c00	cpe:2.3:o:huawei:dp300_firmware:v500r002c00:::::::*
huawei	nip6600_firmware	v500r001c00	cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:::::::*
huawei	nip6600_firmware	v500r001c20	cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:::::::*
huawei	nip6600_firmware	v500r001c30	cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:::::::*
huawei	secospace_usg6500_firmware	v500r001c00	cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:::::::*
huawei	secospace_usg6500_firmware	v500r001c20	cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:::::::*
huawei	secospace_usg6500_firmware	v500r001c30	cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:::::::*
huawei	secospace_usg6600_firmware	v500r001c00	cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:::::::*
huawei	secospace_usg6600_firmware	v500r001c20	cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:::::::*
huawei	secospace_usg6600_firmware	v500r001c30	cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:::::::*

Rows per page:

1-10 of 301

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

12.6%

JSON

Related for HUAWEI-SA-20171201-01-PSE