Resource exhaustion in Huawei Espace U1910
CVE-2017-2690
SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C20, V200R003C30,eSpace U1981 with software V200R003C20 and V200R003C30 have an denial of service (DoS) vulnerability, which allow an attacker with specific permission to craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.002 (13.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Huawei Espace_u1910
- Huawei Espace_u1910_firmware — versions v200r003c00, v200r003c20, v200r003c30
- Huawei Espace_u1911
- Huawei Espace_u1911_firmware — versions v200r003c20, v200r003c30
- Huawei Espace_u1930
- Huawei Espace_u1930_firmware — versions v200r003c20, v200r003c30
- Huawei Espace_u1960
- Huawei Espace_u1960_firmware — versions v200r003c20, v200r003c30
- Huawei Espace_u1980
- Huawei Espace_u1980_firmware — versions v200r003c20, v200r003c30
Weakness classification (CWE)
References
- psirt@huawei.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-2690?
- CVE-2017-2690 is a medium-severity vulnerability in Huawei Espace U1910, classified under Uncontrolled Resource Consumption. CVSS score: 5.5/10. Published 2017-11-22.
- How severe is CVE-2017-2690?
- Medium severity. CVSS v3 base score is 5.5 out of 10.