PT-2018-6461 · Huawei · Huawei Srg1300+12

Published 2018-02-14 · Updated 2018-03-29 · CVE-2017-17250

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Huawei AR120-S version V200R005C32 Huawei AR1200 version V200R005C32 Huawei AR1200-S version V200R005C32 Huawei AR150 version V200R005C32 Huawei AR150-S version V200R005C32 Huawei AR160 version V200R005C32 Huawei AR200 version V200R005C32 Huawei AR200-S version V200R005C32 Huawei AR2200-S version V200R005C32 Huawei AR3200 version V200R005C32 Huawei AR3200 versions V200R005C32 through V200R007C00 Huawei AR510 version V200R005C32 Huawei NetEngine16EX version V200R005C32 Huawei SRG1300 version V200R005C32 Huawei SRG2300 version V200R005C32 Huawei SRG3300 version V200R005C32

Description: The issue is caused by an out-of-bounds write vulnerability. When a user executes a query command after the device received an abnormal OSPF message, the software writes data past the end of the intended buffer due to the insufficient verification of the input data. An unauthenticated, remote attacker could exploit this by sending abnormal OSPF messages to the device. A successful exploit could cause the system to crash.

Recommendations: For Huawei AR120-S version V200R005C32, update to a fixed version. For Huawei AR1200 version V200R005C32, update to a fixed version. For Huawei AR1200-S version V200R005C32, update to a fixed version. For Huawei AR150 version V200R005C32, update to a fixed version. For Huawei AR150-S version V200R005C32, update to a fixed version. For Huawei AR160 version V200R005C32, update to a fixed version. For Huawei AR200 version V200R005C32, update to a fixed version. For Huawei AR200-S version V200R005C32, update to a fixed version. For Huawei AR2200-S version V200R005C32, update to a fixed version. For Huawei AR3200 version V200R005C32, update to a fixed version. For Huawei AR3200 versions V200R005C32 through V200R007C00, update to a fixed version. For Huawei AR510 version V200R005C32, update to a fixed version. For Huawei NetEngine16EX version V200R005C32, update to a fixed version. For Huawei SRG1300 version V200R005C32, update to a fixed version. For Huawei SRG2300 version V200R005C32, update to a fixed version. For Huawei SRG3300 version V200R005C32, update to a fixed version. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation. Avoid using the device until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2017-17250

Affected Products

Huawei Ar120-S

Huawei Ar1200

Huawei Ar150

Huawei Ar160

Huawei Ar200

Huawei Ar2200

Huawei Ar3200

Huawei Ar510

Huawei Netengine16Ex

Huawei Srg1300

Huawei Srg2300

Huawei Srg3300

Huawei Vrp

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-17250 · Security Note
• https://osv.dev/vulnerability/CVE-2017-17250 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20180214-01-ospf-en · Vendor Advisory