PT-2018-6410 · Huawei · Te50+11

Published 2018-03-05 · Updated 2018-03-27 · CVE-2017-17142

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Huawei DP300 versions V500R002C00 through V500R002C00SPCa00 Huawei RP200 version V500R002C00SPC200 Huawei RSE6500 versions V500R002C00SPC100 through V500R002C00SPC700 Huawei TE30 versions V100R001C10 through V100R001C10SPC800 Huawei TE30 versions V500R002C00SPC200 through V500R002C00SPCb00 Huawei TE40 versions V500R002C00SPC600 through V500R002C00SPCb00 Huawei TE50 versions V500R002C00SPC600 through V500R002C00SPCb00 Huawei TE60 versions V100R001C01SPC100 through V100R001C10SPC900 Huawei TE60 versions V500R002C00 through V500R002C00SPCb00 Huawei TP3106 versions V100R002C00 through V100R002C00SPC800 Huawei TP3206 versions V100R002C00 through V100R002C00SPC800 Huawei TP3206 version V100R002C00SPC700 Huawei ViewPoint 9030 versions V100R011C02SPC100 through V100R011C03SPC500 Huawei eSpace U1960 version V200R003C30SPC200 Huawei eSpace U1981 versions V100R001C20SPC700 through V200R003C20SPCa00

Description: The issue is related to an overflow vulnerability in the SIP module. An attacker can exploit this by sending a specially crafted SIP message, which can lead to a process reboot at random.

Recommendations: For Huawei DP300 versions V500R002C00 through V500R002C00SPCa00, update to a version that contains a fix for this issue. For Huawei RP200 version V500R002C00SPC200, update to a version that contains a fix for this issue. For Huawei RSE6500 versions V500R002C00SPC100 through V500R002C00SPC700, update to a version that contains a fix for this issue. For Huawei TE30 versions V100R001C10 through V100R001C10SPC800, update to a version that contains a fix for this issue. For Huawei TE30 versions V500R002C00SPC200 through V500R002C00SPCb00, update to a version that contains a fix for this issue. For Huawei TE40 versions V500R002C00SPC600 through V500R002C00SPCb00, update to a version that contains a fix for this issue. For Huawei TE50 versions V500R002C00SPC600 through V500R002C00SPCb00, update to a version that contains a fix for this issue. For Huawei TE60 versions V100R001C01SPC100 through V100R001C10SPC900, update to a version that contains a fix for this issue. For Huawei TE60 versions V500R002C00 through V500R002C00SPCb00, update to a version that contains a fix for this issue. For Huawei TP3106 versions V100R002C00 through V100R002C00SPC800, update to a version that contains a fix for this issue. For Huawei TP3206 versions V100R002C00 through V100R002C00SPC800, update to a version that contains a fix for this issue. For Huawei ViewPoint 9030 versions V100R011C02SPC100 through V100R011C03SPC500, update to a version that contains a fix for this issue. For Huawei eSpace U1960 version V200R003C30SPC200, update to a version that contains a fix for this issue. For Huawei eSpace U1981 versions V100R001C20SPC700 through V200R003C20SPCa00, update to a version that contains a fix for this issue. As a temporary workaround, consider disabling the SIP module until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-17142

Affected Products

Dp300

Rp200

Rse6500

Te30

Te40

Te50

Te60

Tp3106

Tp3206

Viewpoint 9030

Espace U1960

Espace U1981

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sip-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-17142 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-17142 · Security Note