PT-2017-14759 · Huawei · Te50+26

Published 2017-12-15 · Updated 2018-03-09 · CVE-2017-17298

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versions V200R006C10 through V200R008C30 Huawei AR160 versions V200R006C10 through V200R008C30 Huawei AR200 versions V200R006C10 through V200R008C30 Huawei AR200-S versions V200R006C10 through V200R008C30 Huawei AR2200 versions V200R006C10 through V200R008C30 Huawei AR2200-S versions V200R006C10 through V200R008C30 Huawei AR3200 versions V200R006C10 through V200R008C30 Huawei AR3600 versions V200R006C10 through V200R008C30 Huawei AR510 versions V200R006C10 through V200R008C30 Huawei DP300 version V500R002C00 Huawei NetEngine16EX versions V200R006C10 through V200R008C30 Huawei RP200 versions V500R002C00 through V600R006C00 Huawei SRG1300 versions V200R006C10 through V200R008C30 Huawei SRG2300 versions V200R006C10 through V200R008C30 Huawei SRG3300 versions V200R006C10 through V200R008C30 Huawei TE30 versions V100R001C02 through V600R006C00 Huawei TE40 versions V500R002C00 through V600R006C00 Huawei TE50 version V500R002C00 Huawei TE60 versions V100R001C01 through V600R006C00 Huawei TP3106 version V100R002C00 Huawei TP3206 versions V100R002C00 through V100R002C10 Huawei ViewPoint 9030 versions V100R011C02 through V100R011C03

Description The issue is caused by a buffer overflow vulnerability due to insufficient validation of certificates. An unauthenticated, remote attacker may send specially crafted certificates to the affected products, potentially causing buffer overflow and service abnormalities.

Recommendations For Huawei AR120-S versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR1200 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR1200-S versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR150 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR150-S versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR160 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR200 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR200-S versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR2200 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR2200-S versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR3200 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR3600 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei AR510 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei DP300 version V500R002C00, update the certificate validation mechanism to prevent buffer overflow. For Huawei NetEngine16EX versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei RP200 versions V500R002C00 through V600R006C00, update the certificate validation mechanism to prevent buffer overflow. For Huawei SRG1300 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei SRG2300 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei SRG3300 versions V200R006C10 through V200R008C30, update the certificate validation mechanism to prevent buffer overflow. For Huawei TE30 versions V100R001C02 through V600R006C00, update the certificate validation mechanism to prevent buffer overflow. For Huawei TE40 versions V500R002C00 through V600R006C00, update the certificate validation mechanism to prevent buffer overflow. For Huawei TE50 version V500R002C00, update the certificate validation mechanism to prevent buffer overflow. For Huawei TE60 versions V100R001C01 through V600R006C00, update the certificate validation mechanism to prevent buffer overflow. For Huawei TP3106 version V100R002C00, update the certificate validation mechanism to prevent buffer overflow. For Huawei TP3206 versions V100R002C00 through V100R002C10, update the certificate validation mechanism to prevent buffer overflow. For Huawei ViewPoint 9030 versions V100R011C02 through V100R011C03, update the certificate validation mechanism to prevent buffer overflow. As a temporary workaround, consider restricting access to the certificate validation mechanism until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-17298

Affected Products

Ar120-S

Ar1200

Ar1200-S

Ar150

Ar150-S

Ar160

Ar200

Ar200-S

Ar2200

Ar2200-S

Ar3200

Ar3600

Ar510

Dp300

Huawei Vrp

Netengine16Ex

Rp200

Srg1300

Srg2300

Srg3300

Te30

Te40

Te50

Te60

Tp3106

Tp3206

Viewpoint 9030

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-overflow-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-17298 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-17298 · Security Note