PT-2017-14001 · Huawei · Huawei S6700+2

Published 2017-12-06 · Updated 2018-01-17 · CVE-2017-15324

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei S5700 and S6700 version V200R005C00

Description The issue is due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this by sending malformed NQA packets to the target device. Successful exploitation could make the device restart.

Recommendations For Huawei S5700 and S6700 version V200R005C00, consider disabling the reception of NQA packets as a temporary workaround until a patch is available. Restrict access to the device to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-15324

Affected Products

Huawei S5700

Huawei S6700

Huawei Vrp

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-15324 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-15324 · Vendor Advisory