Resource exhaustion in Huawei Espace U1910
CVE-2017-2690
SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C20, V200R003C30,eSpace U1981 with software V200R003C20 and V200R003C30 have an denial of service (DoS) vulnerability, which allow an attacker with specific permission to craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition.
Vulnerability class: DoS (Denial of Service)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.002 (13.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 13th percentile — 13.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Huawei Espace U1910
- Huawei Espace U1910 Firmware — versions v200r003c00, v200r003c20, v200r003c30
- Huawei Espace U1911
- Huawei Espace U1911 Firmware — versions v200r003c20, v200r003c30
- Huawei Espace U1930
- Huawei Espace U1930 Firmware — versions v200r003c20, v200r003c30
- Huawei Espace U1960
- Huawei Espace U1960 Firmware — versions v200r003c20, v200r003c30
- Huawei Espace U1980
- Huawei Espace U1980 Firmware — versions v200r003c20, v200r003c30
Weakness classification (CWE)
References
- www.securityfocus.com/bid/95382 (VDB Entry, Third Party Advisory, vdb-entry)
- www.huawei.com/en/psirt/security-advisories/huawei-sa-20170111-01-parser-en (Vendor Advisory)
Frequently asked questions
- What is CVE-2017-2690?
- CVE-2017-2690 is a medium-severity vulnerability in Huawei Espace U1910, classified under Uncontrolled Resource Consumption. CVSS score: 5.5/10. Published 2017-11-22.
- How severe is CVE-2017-2690?
- Medium severity. CVSS v3 base score is 5.5 out of 10.