Improper input validation in Huawei Dp300
CVE-2017-2722
DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R004C10,eSpace 7950 with software V200R003C00 and V200R003C30,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30, V200R003C00, V200R003C20 and V200R003C30 have an input validation vulnerability.A remote attacker may exploit this vulnerability by crafting a malformed packet and sending it to the device. A successful exploit could allow the attacker to cause a denial of service or execute arbitrary code.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.012 (66.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Huawei Dp300
- Huawei Dp300_firmware — versions v500r002c00
- Huawei Ecns210_td
- Huawei Ecns210_td_firmware — versions v100r004c10
- Huawei Espace_7950
- Huawei Espace_7950_firmware — versions v200r003c00, v200r003c30
- Huawei Espace_iad
- Huawei Espace_iad_firmware — versions v300r001c07spca00, v300r002c01spcb00
- Huawei Espace_u1981
- Huawei Espace_u1981_firmware — versions v100r001c20, v100r001c30, v200r003c00
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-2722?
- CVE-2017-2722 is a high-severity vulnerability in Huawei Dp300, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2017-11-22.
- How severe is CVE-2017-2722?
- High severity. CVSS v3 base score is 8.8 out of 10.