High severity · published Dec 22, 2017
CVE-2017-15318
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00,…
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
Rp200 Firmware · Huawei
v500r002c00; v600r006c00 · source: NVD
TF
Te30 Firmware · Huawei
v100r001c10; v500r002c00; v600r006c00 · source: NVD
TF
Te40 Firmware · Huawei
v500r002c00; v600r006c00 · source: NVD
TF
Te50 Firmware · Huawei
v500r002c00; v600r006c00 · source: NVD
TF
Te60 Firmware · Huawei
v100r001c10; v500r002c00; v600r006c00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-15318
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-15318
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en
More from Rp200 Firmware
7.5
CVE-2019-19414
There is an integer overflow vulnerability in LDAP server of some Huawei products
7.5
CVE-2019-19413
There is an integer overflow vulnerability in LDAP client of some Huawei products
7.5
CVE-2017-17310
Electronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00,…
7.5
CVE-2017-15320
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00,…
7.5
CVE-2017-15319
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00,…