CVE-2017-15318

Summary

CVE	CVE-2017-15318
State	PUBLISHED
Assigner	huawei
Source Priority	CVE Program / NVD first with legacy fallback
Published	2017-12-22 17:29:13 UTC
Updated	2025-04-20 01:37:25 UTC
Description	RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system.

Primary CVSS: v3.0 7.5 HIGH from [email protected]

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.002100000 probability, percentile 0.433770000 (date 2026-05-19)

Problem Types: CWE-125 | out-of-bounds read

Version	Source	Type	Score	Severity	Vector
3.0	[email protected]	Primary	7.5	HIGH	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
2.0	[email protected]	Primary	7.8		`AV:N/AC:L/Au:N/C:N/I:N/A:C`

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Vector

Network

Access Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

AV:N/AC:L/Au:N/C:N/I:N/A:C

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Huawei	Rp200	-	All	All	All
Operating System	Huawei	Rp200 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Rp200 Firmware	v600r006c00	All	All	All
Hardware	Huawei	Te30	-	All	All	All
Operating System	Huawei	Te30 Firmware	v100r001c10	All	All	All
Operating System	Huawei	Te30 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te30 Firmware	v600r006c00	All	All	All
Hardware	Huawei	Te40	-	All	All	All
Operating System	Huawei	Te40 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te40 Firmware	v600r006c00	All	All	All
Hardware	Huawei	Te50	-	All	All	All
Operating System	Huawei	Te50 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te50 Firmware	v600r006c00	All	All	All
Hardware	Huawei	Te60	-	All	All	All
Operating System	Huawei	Te60 Firmware	v100r001c10	All	All	All
Operating System	Huawei	Te60 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te60 Firmware	v600r006c00	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Huawei Technologies Co. Ltd.	RP200	affected V500R002C00	Not specified
CNA	Huawei Technologies Co. Ltd.	RP200	affected V600R006C00	Not specified
CNA	Huawei Technologies Co. Ltd.	TE30	affected V100R001C10	Not specified
CNA	Huawei Technologies Co. Ltd.	TE30	affected V500R002C00	Not specified
CNA	Huawei Technologies Co. Ltd.	TE30	affected V600R006C00	Not specified
CNA	Huawei Technologies Co. Ltd.	TE40	affected V500R002C00	Not specified
CNA	Huawei Technologies Co. Ltd.	TE40	affected V600R006C00	Not specified
CNA	Huawei Technologies Co. Ltd.	TE50	affected V500R002C00	Not specified
CNA	Huawei Technologies Co. Ltd.	TE50	affected V600R006C00	Not specified
CNA	Huawei Technologies Co. Ltd.	TE60	affected V100R001C10	Not specified
CNA	Huawei Technologies Co. Ltd.	TE60	affected V500R002C00	Not specified
CNA	Huawei Technologies Co. Ltd.	TE60	affected V600R006C00	Not specified

Reference	Source	Link	Tags
Security Advisory - Three Out-of-bounds Read Vulnerabilities in Some Huawei Products	af854a3a-2127-422b-91ae-364da2661108	www.huawei.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.