PT-2018-6466 · Huawei · Te50+5

Publicado

2018-03-09

·

Atualizado

2018-03-27

·

CVE-2017-17282

CVSS v3.1

3.1

Baixa

VetorAV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions: Huawei DP300 versions V500R002C00 Huawei RP200 versions V500R002C00, V600R006C00 Huawei TE30 versions V100R001C10, V500R002C00, V600R006C00 Huawei TE40 versions V500R002C00, V600R006C00 Huawei TE50 versions V500R002C00, V600R006C00 Huawei TE60 versions V100R001C10, V500R002C00, V600R006C00
Description: The issue is related to a buffer overflow in the SCCP module. An attacker needs to send malformed packets to the affected products repeatedly, exploiting insufficient input validation. Successful exploitation may cause service abnormalities.
Recommendations: For Huawei DP300 version V500R002C00, update to a version that fixes the buffer overflow vulnerability in the SCCP module. For Huawei RP200 versions V500R002C00, V600R006C00, update to a version that fixes the buffer overflow vulnerability in the SCCP module. For Huawei TE30 versions V100R001C10, V500R002C00, V600R006C00, update to a version that fixes the buffer overflow vulnerability in the SCCP module. For Huawei TE40 versions V500R002C00, V600R006C00, update to a version that fixes the buffer overflow vulnerability in the SCCP module. For Huawei TE50 versions V500R002C00, V600R006C00, update to a version that fixes the buffer overflow vulnerability in the SCCP module. For Huawei TE60 versions V100R001C10, V500R002C00, V600R006C00, update to a version that fixes the buffer overflow vulnerability in the SCCP module.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-17282

Produtos afetados

Dp300
Rp200
Te30
Te40
Te50
Te60