Out-of-bounds Read in Huawei Quidway S2700
CVE-2017-17165
IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S2700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5300 V200R003C00, V200R003C00SPC300T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R005C05, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5700 V200R003C00, V200R003C00SPC316T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S600-E V200R008C00, V200R009C00, S6300 V200R003C00, V200R005C00, V200R007C00, V200R008C00, V200R009C00, S6700 V200R003C00, V200R005C00, V200R005C01, V200R005C02, V200R007C00, V200R008C00, V200R009C00 has an out-of-bounds read vulnerability. An unauthenticated attacker may send crafted malformed IPv6 packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause device to reset.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.010 (61.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 61st percentile — 61.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000
Affected products
- Huawei Quidway S2700
- Huawei Quidway S2700 Firmware — versions v200r003c00spc300
- Huawei Quidway S5300
- Huawei Quidway S5300 Firmware — versions v200r003c00spc300
- Huawei Quidway S5700
- Huawei Quidway S5700 Firmware — versions v200r003c00spc300
- Huawei S2300
- Huawei S2300 Firmware — versions v200r003c00, v200r003c00spc300t, v200r005c00
- Huawei S2700
- Huawei S2700 Firmware — versions v200r005c00, v200r006c00, v200r007c00
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2017-17165?
- CVE-2017-17165 is a high-severity vulnerability in Huawei Quidway S2700, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2018-02-15.
- How severe is CVE-2017-17165?
- High severity. CVSS v3 base score is 7.5 out of 10.