CVE-2017-2690
Description
SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C20, V200R003C30,eSpace U1981 with software V200R003C20 and V200R003C30 have an denial of service (DoS) vulnerability, which allow an attacker with specific permission to craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei softco_firmware | v200r003c20 | — |
| huawei espace_u1910_firmware | v200r003c00, v200r003c20, v200r003c30 | — |
| huawei espace_u1911_firmware | v200r003c20, v200r003c30 | — |
| huawei espace_u1930_firmware | v200r003c20, v200r003c30 | — |
| huawei espace_u1960_firmware | v200r003c20, v200r003c30 | — |
| huawei espace_u1980_firmware | v200r003c20, v200r003c30 | — |
| huawei espace_u1981_firmware | v200r003c20, v200r003c30 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.