PT-2018-5801 · Huawei · Te50+10

Published 2018-02-15 · Updated 2018-02-22 · CVE-2017-15353

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Huawei DP300 versions V500R002C00 through V600R006C00 Huawei RP200 version V500R002C00 Huawei RSE6500 version V500R002C00 Huawei TE30 versions V100R001C02 through V100R001C10 Huawei TE30 version V500R002C00 Huawei TE30 version V600R006C00 Huawei TE40 versions V500R002C00 through V600R006C00 Huawei TE50 versions V500R002C00 through V600R006C00 Huawei TE60 versions V100R001C01 through V100R001C10 Huawei TE60 versions V500R002C00 through V600R006C00 Huawei TX50 versions V500R002C00 through V600R006C00 Huawei VP9660 version V500R002C00 Huawei VP9660 version V500R002C10 Huawei ViewPoint 8660 version V100R008C03 Huawei ViewPoint 9030 versions V100R011C02 through V100R011C03

Description: The issue is caused by an out-of-bounds read vulnerability due to insufficient input validation. An attacker must control the peer device and send specially crafted messages to the affected products. Successful exploitation may cause service abnormalities.

Recommendations: For Huawei DP300 version V500R002C00, update to a version later than V600R006C00. For Huawei RP200 version V500R002C00, update to a version later than V500R002C00. For Huawei RSE6500 version V500R002C00, update to a version later than V500R002C00. For Huawei TE30 versions V100R001C02 through V100R001C10, update to a version later than V100R001C10. For Huawei TE30 version V500R002C00, update to a version later than V600R006C00. For Huawei TE30 version V600R006C00, update to a version later than V600R006C00. For Huawei TE40 versions V500R002C00 through V600R006C00, update to a version later than V600R006C00. For Huawei TE50 versions V500R002C00 through V600R006C00, update to a version later than V600R006C00. For Huawei TE60 versions V100R001C01 through V100R001C10, update to a version later than V100R001C10. For Huawei TE60 versions V500R002C00 through V600R006C00, update to a version later than V600R006C00. For Huawei TX50 versions V500R002C00 through V600R006C00, update to a version later than V600R006C00. For Huawei VP9660 version V500R002C00, update to a version later than V500R002C10. For Huawei VP9660 version V500R002C10, update to a version later than V500R002C10. For Huawei ViewPoint 8660 version V100R008C03, update to a version later than V100R008C03. For Huawei ViewPoint 9030 versions V100R011C02 through V100R011C03, update to a version later than V100R011C03.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2017-15353

Affected Products

Dp300

Rp200

Rse6500

Te30

Te40

Te50

Te60

Tx50

Vp9660

Viewpoint 8660

Viewpoint 9030

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-h323-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-15353 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15353 · Security Note