PT-2018-6475 · Huawei · Huawei Te60+1

Publicado 2018-02-15 · Atualizado 2019-10-03 · CVE-2017-17290

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Huawei TE60 version V600R006C00 Huawei ViewPoint 9030 versions V100R011C02, V100R011C03

Description: The issue is related to resource management errors in the LDAP clients of the affected devices. An unauthenticated, remote attacker may cause the LDAP server to not respond to the client's request, potentially leading to exhaustion of the LDAP client's connection resources due to improper management of LDAP connection resources.

Recommendations: For Huawei TE60 version V600R006C00, update the software to a version that addresses the resource management errors vulnerability. For Huawei ViewPoint 9030 versions V100R011C02 and V100R011C03, update the software to a version that addresses the resource management errors vulnerability. As a temporary workaround, consider restricting access to the LDAP server to minimize the risk of exploitation.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2017-17290

Produtos afetados

Huawei Te60

Huawei Viewpoint 9030

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-17290 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-17290 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-ldap-en · Aviso do Fabricante