Resource exhaustion in Huawei Dp300
CVE-2017-15323
Huawei DP300 V500R002C00, NIP6600 V500R001C00, V500R001C20, V500R001C30, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, TE60 V100R001C01, V100R001C10, V100R003C00, V500R002C00, V600R006C00, TP3106 V100R001C06, V100R002C00, VP9660…
Vulnerability class: DoS (Denial of Service)
EPSS: 0.002 (12.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Huawei Dp300
- Huawei Dp300_firmware — versions v500r002c00
- Huawei Ecns210_td
- Huawei Ecns210_td_firmware — versions v100r004c10
- Huawei Espace_u1981
- Huawei Espace_u1981_firmware — versions v200r003c30
- Huawei Nip6600
- Huawei Nip6600_firmware — versions v500r001c00, v500r001c20, v500r001c30
- Huawei Secospace_usg6500
- Huawei Secospace_usg6500_firmware — versions v500r001c00, v500r001c20, v500r001c30
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-15323?
- CVE-2017-15323 is a medium-severity vulnerability in Huawei Dp300, classified under Uncontrolled Resource Consumption. CVSS score: 5.5/10. Published 2018-03-09.
- How severe is CVE-2017-15323?
- Medium severity. CVSS v3 base score is 5.5 out of 10.