Improper input validation in Huawei Ar100
CVE-2017-17151
Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewP…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.008 (52.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Huawei Ar100
- Huawei Ar100_firmware — versions v200r008c20spc700, v200r008c20spc700pwe, v200r008c20spc800
- Huawei Ar100-s
- Huawei Ar100-s_firmware — versions v200r007c00spca00, v200r007c00spcb00, v200r008c20
- Huawei Ar110-s
- Huawei Ar110-s_firmware — versions v200r007c00spc600, v200r007c00spc900, v200r007c00spcb00
- Huawei Ar120
- Huawei Ar1200
- Huawei Ar1200_firmware — versions v200r006c10, v200r006c10pwe, v200r006c10spc030
- Huawei Ar1200-s
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-17151?
- CVE-2017-17151 is a medium-severity vulnerability in Huawei Ar100, classified under Improper Input Validation. CVSS score: 5.9/10. Published 2018-02-15.
- How severe is CVE-2017-17151?
- Medium severity. CVSS v3 base score is 5.9 out of 10.