CVE-2017-17318

Medium

Description

Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before E5771h-937TCPU-V200R001B329D05SP00C1308 have a Denial of Service (DoS) vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a DoS attack by exploiting this vulnerability.

SeverityMedium
CVSS6.5
Exploit probability—
ProductHuawei E5771h-937 Firmware
PublishedApr 30, 2018
First seenApr 30, 2018

How to fix

Update
  • huawei e5771h-937_firmwarev200r001b329d05sp00c1308, v200r001b328d62sp00c1133 or later

Affected products

ProductAffected versionsFixed in
huawei e5771h-937_firmwarev < v200r001b329d05sp00c1308, v < v200r001b328d62sp00c1133v200r001b329d05sp00c1308, v200r001b328d62sp00c1133

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.