What is CVE-2017-17300?

CVE-2017-17300 is a high-severity vulnerability in Huawei S12700, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-02-15.

How severe is CVE-2017-17300?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Huawei S12700

CVE-2017-17300

Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V200R008C00, V200R009C00, S6700 V200R008C00, V200R009C00, S7700 V200R008C00, V200R009C00, S9700 V200R008C00, V200R009C00 have a numeric errors vulnerability. An unauthenticated, remote attacker may send specific TCP messages with keychain authentication option to the affected products. Due to the improper validation of the messages, it will cause numeric errors when handling the messages. Successful exploit will cause the affected products to reset.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.016 (74.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Huawei S12700
Huawei S12700_firmware — versions v200r008c00, v200r009c00
Huawei S5700
Huawei S5700_firmware — versions v200r007c00, v200r008c00, v200r009c00
Huawei S6700
Huawei S6700_firmware — versions v200r008c00, v200r009c00
Huawei S7700
Huawei S7700_firmware — versions v200r008c00, v200r009c00
Huawei S9700
Huawei S9700_firmware — versions v200r008c00, v200r009c00

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-17300?: CVE-2017-17300 is a high-severity vulnerability in Huawei S12700, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-02-15.
How severe is CVE-2017-17300?: High severity. CVSS v3 base score is 7.5 out of 10.