What is CVE-2017-17318?

CVE-2017-17318 is a medium-severity vulnerability in Huawei E5771h-937, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2018-04-30.

How severe is CVE-2017-17318?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Improper input validation in Huawei E5771h-937

CVE-2017-17318

Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before E5771h-937TCPU-V200R001B329D05SP00C1308 have a Denial of Service (DoS) vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a DoS attack by exploiting this vulnerability.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.004 (29.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Huawei E5771h-937
Huawei E5771h-937_firmware
Huawei Technologies Co., Ltd. E5771h-937 — versions E5771h-937, The versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and The versions before E5771h-937TCPU-V200R001B329D05SP00C1308

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-17318?: CVE-2017-17318 is a medium-severity vulnerability in Huawei E5771h-937, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2018-04-30.
How severe is CVE-2017-17318?: Medium severity. CVSS v3 base score is 6.5 out of 10.