CVE-2017-17151

Medium

Description

Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and ViewPoint 9030 have an insufficient validation vulnerability. Since packet validation is insufficient, an unauthenticated attacker may send special H323 packets to exploit the vulnerability. Successful exploit could allow the attacker to send malicious packets and result in DOS attacks.

SeverityMedium
CVSS5.9
Exploit probability—
ProductHuawei Ar100 Firmware
PublishedFeb 15, 2018
First seenFeb 15, 2018

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
huawei ar100_firmwarev200r008c20spc700, v200r008c20spc700pwe, v200r008c20spc800, v200r008c20spc800pwe, v200r008c30—
huawei ar100-s_firmwarev200r007c00spca00, v200r007c00spcb00, v200r008c20, v200r008c20spc700, v200r008c20spc800, v200r008c20spc800pwe, v200r008c30—
huawei ar110-s_firmwarev200r007c00spc600, v200r007c00spc900, v200r007c00spcb00, v200r008c20spc800, v200r008c30—
huawei ar120_firmwarev200r006c10, v200r006c10spc300, v200r006c10spc300pwe, v200r007c00, v200r007c00pwe, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600, v200r007c00spc600pwe, v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c01, v200r008c20, v200r008c20spc700, v200r008c20spc800, v200r008c30—
huawei ar120-s_firmwarev200r006c10, v200r006c10spc300, v200r007c00, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600, v200r007c00spc900, v200r007c00spca00, v200r007c00spcb00, v200r008c20, v200r008c20spc700, v200r008c20spc800, v200r008c30—
huawei ar1200_firmwarev200r006c10, v200r006c10pwe, v200r006c10spc030, v200r006c10spc300, v200r006c10spc300pwe, v200r006c10spc600, v200r006c13, v200r007c00, v200r007c00pwe, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600, v200r007c00spc600pwe, v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spca00, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c01, v200r007c02, v200r008c20, v200r008c20spc600, v200r008c20spc700, v200r008c20spc800, v200r008c30—
huawei ar1200-s_firmwarev200r006c10, v200r006c10spc300, v200r007c00, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600, v200r007c00spc900, v200r007c00spcb00, v200r008c20, v200r008c20spc700, v200r008c20spc800, v200r008c20spc800pwe, v200r008c30—
huawei ar150_firmwarev200r006c10, v200r006c10pwe, v200r006c10spc300, v200r006c10spc300pwe, v200r007c00, v200r007c00pwe, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600, v200r007c00spc600pwe, v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c01, v200r007c02, v200r007c02pwe, v200r008c20, v200r008c20spc700, v200r008c20spc800, v200r008c30—
huawei ar150-s_firmwarev200r006c10spc300, v200r007c00, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600, v200r007c00spc900, v200r007c00spcb00, v200r008c20, v200r008c20spc700, v200r008c20spc800, v200r008c30—
huawei ar160_firmwarev200r006c10, v200r006c10pwe, v200r006c10spc100, v200r006c10spc200, v200r006c10spc300, v200r006c10spc300pwe, v200r006c10spc600, v200r006c12, v200r007c00, v200r007c00pwe, v200r007c00spc100, v200r007c00spc200, v200r007c00spc500, v200r007c00spc600, v200r007c00spc600pwe, v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c01, v200r007c02, v200r008c20, v200r008c20spc500t, v200r008c20spc501t, v200r008c20spc600, v200r008c20spc700, v200r008c20spc800, v200r008c30, v200r008c30spc100—
huawei ar200_firmwarev200r006c10, v200r006c10pwe, v200r006c10spc100, v200r006c10spc300, v200r006c10spc300pwe, v200r007c00, v200r007c00pwe, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600, v200r007c00spc600pwe, v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c01, v200r008c20, v200r008c20spc600, v200r008c20spc700, v200r008c20spc800, v200r008c20spc900, v200r008c20spc900pwe, v200r008c30—
huawei ar200-s_firmwarev200r006c10, v200r006c10spc300, v200r007c00, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600, v200r007c00spc900, v200r007c00spcb00, v200r008c20, v200r008c20spc700, v200r008c20spc800, v200r008c30—
huawei ar2200_firmwarev200r006c10, v200r006c10pwe, v200r006c10spc300, v200r006c10spc300pwe, v200r006c10spc600, v200r006c13, v200r006c16pwe, v200r007c00, v200r007c00pwe, v200r007c00spc100, v200r007c00spc200, v200r007c00spc500, v200r007c00spc600, v200r007c00spc600pwe, v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spca00, v200r007c00spcb00—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.