CVE-2017-17316

Summary

CVE	CVE-2017-17316
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2018-07-02 13:29:00 UTC
Updated	2018-09-11 13:57:00 UTC
Description	Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability. An unauthenticated, remote attacker has to control the peer device and craft the Signalling Connection Control Part (SCCP) messages to the target devices. Due to insufficient input validation of some values in the messages, successful exploit will cause out-of-bounds read and some services abnormal.

Risk And Classification

Problem Types: CWE-125

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Huawei	Dp300	-	All	All	All
Hardware	Huawei	Dp300	-	All	All	All
Operating System	Huawei	Dp300 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Dp300 Firmware	v500r002c00	All	All	All
Hardware	Huawei	Rp200	-	All	All	All
Hardware	Huawei	Rp200	-	All	All	All
Operating System	Huawei	Rp200 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Rp200 Firmware	v600r006c00	All	All	All
Operating System	Huawei	Rp200 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Rp200 Firmware	v600r006c00	All	All	All
Hardware	Huawei	Te30	-	All	All	All
Hardware	Huawei	Te30	-	All	All	All
Operating System	Huawei	Te30 Firmware	v100r001c10	All	All	All
Operating System	Huawei	Te30 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te30 Firmware	v600r006c00	All	All	All
Operating System	Huawei	Te30 Firmware	v100r001c10	All	All	All
Operating System	Huawei	Te30 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te30 Firmware	v600r006c00	All	All	All
Hardware	Huawei	Te40	-	All	All	All
Hardware	Huawei	Te40	-	All	All	All
Operating System	Huawei	Te40 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te40 Firmware	v600r006c00	All	All	All
Operating System	Huawei	Te40 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te40 Firmware	v600r006c00	All	All	All
Hardware	Huawei	Te50	-	All	All	All
Hardware	Huawei	Te50	-	All	All	All
Operating System	Huawei	Te50 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te50 Firmware	v600r006c00	All	All	All
Operating System	Huawei	Te50 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te50 Firmware	v600r006c00	All	All	All
Hardware	Huawei	Te60	-	All	All	All
Hardware	Huawei	Te60	-	All	All	All
Operating System	Huawei	Te60 Firmware	v100r001c10	All	All	All
Operating System	Huawei	Te60 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te60 Firmware	v600r006c00	All	All	All
Operating System	Huawei	Te60 Firmware	v100r001c10	All	All	All
Operating System	Huawei	Te60 Firmware	v500r002c00	All	All	All
Operating System	Huawei	Te60 Firmware	v600r006c00	All	All	All

References

Reference	Source	Link	Tags
Security Advisory - Out-of-bounds Read Vulnerability in Some Huawei Products	CONFIRM	www.huawei.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.