Out-of-bounds Read in Huawei Dp300
CVE-2017-15353
Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00, V600R006C00, TE60, V100R001C01, V100R001C10, V500R002C00, V600R006C00, TX50, V500R002C00, V600R006C00, VP9660, V500R002C00, V500R002C10, ViewPoint 8660, V100R008C03, ViewPoint 9030, V100R011C02, V100R011C03, Viewpoint 8660, V100R008C03 have an out-of-bounds read vulnerability. An attacker has to control the peer device and send specially crafted messages to the affected products. Due to insufficient input validation, successful exploit may cause some service abnormal.
Vulnerability class: Buffer Overflow
EPSS: 0.007 (49.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.7 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Huawei Dp300
- Huawei Dp300_firmware — versions v500r002c00
- Huawei Rp200
- Huawei Rp200_firmware — versions v500r002c00, v600r006c00
- Huawei Rse6500
- Huawei Rse6500_firmware — versions v500r002c00
- Huawei Te30
- Huawei Te30_firmware — versions v100r001c02, v100r001c10, v500r002c00
- Huawei Te40
- Huawei Te40_firmware — versions v500r002c00, v600r006c00
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-15353?
- CVE-2017-15353 is a low-severity vulnerability in Huawei Dp300, classified under Out-of-bounds Read. CVSS score: 3.7/10. Published 2018-02-15.
- How severe is CVE-2017-15353?
- Low severity. CVSS v3 base score is 3.7 out of 10.