CVE-2017-17290

High

Description

The Light Directory Access Protocol (LDAP) clients of Huawei TE60 with software V600R006C00, ViewPoint 9030 with software V100R011C02, V100R011C03 have a resource management errors vulnerability. An unauthenticated, remote attacker may make the LDAP server not respond to the client's request by controlling the LDAP server. Due to improper management of LDAP connection resource, a successful exploit may cause the connection resource exhausted of the LDAP client.

SeverityHigh
CVSS7.5
Exploit probability—
ProductHuawei Te60 Firmware
PublishedFeb 15, 2018
First seenFeb 15, 2018

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
huawei te60_firmwarev600r006c00—
huawei viewpoint_9030_firmwarev100r011c02, v100r011c03—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2017-17290 · Huawei Te60 Firmware · Dark Radar