PT-2018-5803 · Huawei · Tx50+6

Publicado

2018-02-15

·

Atualizado

2018-02-22

·

CVE-2017-15355

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions: Huawei DP300 versions V500R002C00 through V600R006C00 Huawei RP200 version V600R006C00 Huawei TE30 version V100R001C10 Huawei TE30 versions V500R002C00 through V600R006C00 Huawei TE40 versions V500R002C00 through V600R006C00 Huawei TE50 versions V500R002C00 through V600R006C00 Huawei TE60 versions V100R001C10 through V600R006C00 Huawei TX50 versions V500R002C00 through V600R006C00
Description: The issue is caused by a buffer overflow due to insufficient input validation of three different parameters in HTTP messages. An attacker may send specially crafted HTTP messages to the affected products, potentially causing service abnormalities.
Recommendations: For Huawei DP300 version V500R002C00, update to a version later than V600R006C00. For Huawei RP200 version V600R006C00, update to a version later than V600R006C00. For Huawei TE30 version V100R001C10, update to a version later than V100R001C10. For Huawei TE30 versions V500R002C00 through V600R006C00, update to a version later than V600R006C00. For Huawei TE40 versions V500R002C00 through V600R006C00, update to a version later than V600R006C00. For Huawei TE50 versions V500R002C00 through V600R006C00, update to a version later than V600R006C00. For Huawei TE60 versions V100R001C10 through V600R006C00, update to a version later than V600R006C00. For Huawei TX50 versions V500R002C00 through V600R006C00, update to a version later than V600R006C00. As a temporary workaround, consider restricting access to the affected products to minimize the risk of exploitation.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-15355

Produtos afetados

Dp300
Rp200
Te30
Te40
Te50
Te60
Tx50