PT-2017-14003 · Huawei · Huawei Usg9500+37

Publicado 2017-11-29 · Atualizado 2018-03-01 · CVE-2017-15331

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versions V200R006C10 through V200R008C30 Huawei AR160 versions V200R006C10 through V200R008C30 Huawei AR200 versions V200R006C10 through V200R008C30 Huawei AR200-S versions V200R006C10 through V200R008C30 Huawei AR2200 versions V200R006C10 through V200R008C30 Huawei AR2200-S versions V200R006C10 through V200R008C30 Huawei AR3200 versions V200R006C10 through V200R008C30 Huawei AR510 versions V200R006C10 through V200R008C30 Huawei DP300 version V500R002C00 Huawei IPS Module versions V100R001C10SPC200 through V500R001C50 Huawei MAX PRESENCE version V100R001C00 Huawei NGFW Module versions V100R001C10SPC200 through V500R002C10 Huawei NIP6300 versions V500R001C00 through V500R001C50 Huawei NIP6600 versions V500R001C00 through V500R001C50 Huawei NIP6800 version V500R001C50 Huawei NetEngine16EX versions V200R006C10 through V200R008C30 Huawei RP200 versions V500R002C00SPC200 through V600R006C00 Huawei RSE6500 version V500R002C00 Huawei SMC2.0 versions V100R003C10 through V600R006C00T Huawei SRG1300 versions V200R006C10 through V200R008C30 Huawei SRG2300 versions V200R006C10 through V200R008C30 Huawei SRG3300 versions V200R006C10 through V200R008C30 Huawei SVN5600 versions V200R003C00 through V200R003C10 Huawei SVN5800 versions V200R003C00 through V200R003C10 Huawei SVN5800-C versions V200R003C00 through V200R003C10 Huawei Secospace USG6300 versions V100R001C10 through V500R001C50 Huawei Secospace USG6500 versions V100R001C10 through V500R001C50 Huawei TE30 versions V100R001C10 through V600R006C00 Huawei TE40 versions V500R002C00 through V600R006C00 Huawei TE50 versions V500R002C00 through V600R006C00 Huawei TE60 versions V100R001C01 through V600R006C00 Huawei TP3106 version V100R002C00 Huawei TP3206 version V100R002C00 Huawei USG9500 versions V500R001C00 through V500R001C50 Huawei USG9520 versions V300R001C01 through V300R001C20 Huawei USG9560 versions V300R001C01 through V300R001C20 Huawei USG9580 versions V300R001C01 through V300R001C20 Huawei ViewPoint 9030 versions V100R011C02 through V100R011C03

Description There is an out-of-bounds read vulnerability in the H323 protocol of Huawei products. An unauthenticated, remote attacker may send crafted packets to the affected products. Due to insufficient verification of the packets, a successful exploit will cause a process reboot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2017-15331

Produtos afetados

Huawei Ar120-S

Huawei Ar1200

Huawei Ar150

Huawei Ar160

Huawei Ar200

Huawei Ar2200

Huawei Ar3200

Huawei Ar510

Huawei Dp300

Huawei Ips Module

Huawei Max Presence

Huawei Ngfw Module

Huawei Nip6300

Huawei Nip6600

Huawei Nip6800

Huawei Netengine16Ex

Huawei Rp200

Huawei Rse6500

Huawei Smc2.0

Huawei Srg1300

Huawei Srg2300

Huawei Srg3300

Huawei Svn5600

Huawei Svn5800

Huawei Secospace Usg6300

Huawei Secospace Usg6500

Huawei Te30

Huawei Te40

Huawei Te50

Huawei Te60

Huawei Tp3106

Huawei Tp3206

Huawei Usg9500

Huawei Usg9520

Huawei Usg9560

Huawei Usg9580

Huawei Vrp

Huawei Viewpoint 9030

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-15331 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-15331 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-h323-en · Aviso do Fabricante