CVE-2017-17142

Orta

Açıklama

Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V100R001C10SPC800; V500R002C00SPC200; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; TE40 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE50 V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200; TE60 V100R001C01SPC100; V100R001C01SPC107TB010; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700; V100R001C10SPC800; V100R001C10SPC900; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V500R002C00SPCd00; V600R006C00; V600R006C00SPC100; V600R006C00SPC200; V600R006C00SPC300; TP3106 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C00SPC800; TP3206 V100R002C00; V100R002C00SPC200; V100R002C00SPC400; V100R002C00SPC600; V100R002C00SPC700; V100R002C10; ViewPoint 9030 V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500; eSpace U1960 V200R003C30SPC200; eSpace U1981 V100R001C20SPC700; V200R003C20SPCa00 ürünlerindeki SIP modülü, saldırganın özel olarak hazırlanmış bir SIP mesajı göndererek rastgele işlem yeniden başlatılmasına yol açabileceği bir taşma zafiyetine sahiptir.

ÖnemOrta
CVSS5.3
İstismar olasılığı—
ÜrünHuawei Dp300 Firmware
Yayın5 Mar 2018
İlk görülme5 Mar 2018

Nasıl düzeltilir

Kaynaklarda bu zafiyet için düzeltilmiş sürüm ya da yama bağlantısı yok.

Etkilenen ürünler

ÜrünEtkilenen sürümlerDüzeltildiği sürüm
huawei dp300_firmwarev500r002c00, v500r002c00spc100, v500r002c00spc200, v500r002c00spc300, v500r002c00spc400, v500r002c00spc500, v500r002c00spc600, v500r002c00spc800, v500r002c00spc900, v500r002c00spca00—
huawei rp200_firmwarev500r002c00spc200, v600r006c00, v600r006c00spc200—
huawei rse6500_firmwarev500r002c00spc100, v500r002c00spc200, v500r002c00spc300, v500r002c00spc300t, v500r002c00spc500, v500r002c00spc600, v500r002c00spc700, v500r002c00t—
huawei te30_firmwarev100r001c10, v100r001c10spc100, v100r001c10spc200b010, v100r001c10spc300, v100r001c10spc500, v100r001c10spc600, v100r001c10spc700b010, v100r001c10spc800, v500r002c00spc200, v500r002c00spc500, v500r002c00spc600, v500r002c00spc700, v500r002c00spc900, v500r002c00spcb00, v600r006c00—
huawei te40_firmwarev500r002c00spc600, v500r002c00spc700, v500r002c00spc900, v500r002c00spcb00, v600r006c00, v600r006c00spc200—
huawei te50_firmwarev500r002c00spc600, v500r002c00spc700, v500r002c00spcb00, v600r006c00, v600r006c00spc200—
huawei te60_firmwarev100r001c01spc100, v100r001c01spc107tb010, v100r001c10, v100r001c10spc300, v100r001c10spc400, v100r001c10spc500, v100r001c10spc600, v100r001c10spc700, v100r001c10spc800, v100r001c10spc900, v500r002c00, v500r002c00spc100, v500r002c00spc200, v500r002c00spc300, v500r002c00spc600, v500r002c00spc700, v500r002c00spc800, v500r002c00spc900, v500r002c00spca00, v500r002c00spcb00, v500r002c00spcd00, v600r006c00, v600r006c00spc100, v600r006c00spc200, v600r006c00spc300—
huawei tp3106_firmwarev100r002c00, v100r002c00spc200, v100r002c00spc400, v100r002c00spc600, v100r002c00spc700, v100r002c00spc800—
huawei tp3206_firmwarev100r002c00, v100r002c00spc200, v100r002c00spc400, v100r002c00spc600, v100r002c00spc700, v100r002c10—
huawei viewpoint_9030_firmwarev100r011c02spc100, v100r011c03b012sp15, v100r011c03b012sp16, v100r011c03b015sp03, v100r011c03lgwl01spc100, v100r011c03spc100, v100r011c03spc200, v100r011c03spc300, v100r011c03spc400, v100r011c03spc500—
huawei espace_u1960_firmwarev200r003c30spc200—
huawei espace_u1981_firmwarev100r001c20spc700, v200r003c20spca00—

Sürümünüzü kontrol edin

Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.

Intelligence 360 paketinde

Attack Surface Management

Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.

CVE-2017-17142 · Huawei Dp300 Firmware · Dark Radar