Medium severity · published Feb 15, 2018
CVE-2017-17151
Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300,…
5.9
CVSS
0.8%
EPSS
No
On KEV
Description
Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and ViewPoint 9030 have an insufficient validation vulnerability. Since packet validation is insufficient, an unauthenticated attacker may send special H323 packets to exploit the vulnerability. Successful exploit could allow the attacker to send malicious packets and result in DOS attacks.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ar100 Firmware · Huawei
v200r008c20spc700; v200r008c20spc700pwe; v200r008c20spc800; v200r008c20spc800pwe; v200r008c30 · source: NVD
AF
Ar100-s Firmware · Huawei
v200r007c00spca00; v200r007c00spcb00; v200r008c20; v200r008c20spc700; v200r008c20spc800; v200r008c20spc800pwe; +1 more · source: NVD
AF
Ar110-s Firmware · Huawei
v200r007c00spc600; v200r007c00spc900; v200r007c00spcb00; v200r008c20spc800; v200r008c30 · source: NVD
AF
Ar120 Firmware · Huawei
v200r006c10; v200r006c10spc300; v200r006c10spc300pwe; v200r007c00; v200r007c00pwe; v200r007c00spc100; +12 more · source: NVD
AF
Ar120-s Firmware · Huawei
v200r006c10; v200r006c10spc300; v200r007c00; v200r007c00spc100; v200r007c00spc200; v200r007c00spc600; +7 more · source: NVD
AF
Ar1200 Firmware · Huawei
v200r006c10; v200r006c10pwe; v200r006c10spc030; v200r006c10spc300; v200r006c10spc300pwe; v200r006c10spc600; +19 more · source: NVD
AF
Ar1200-s Firmware · Huawei
v200r006c10; v200r006c10spc300; v200r007c00; v200r007c00spc100; v200r007c00spc200; v200r007c00spc600; +7 more · source: NVD
AF
Ar150 Firmware · Huawei
v200r006c10; v200r006c10pwe; v200r006c10spc300; v200r006c10spc300pwe; v200r007c00; v200r007c00pwe; +15 more · source: NVD
AF
Ar150-s Firmware · Huawei
v200r006c10spc300; v200r007c00; v200r007c00spc100; v200r007c00spc200; v200r007c00spc600; v200r007c00spc900; +5 more · source: NVD
AF
Ar160 Firmware · Huawei
v200r006c10; v200r006c10pwe; v200r006c10spc100; v200r006c10spc200; v200r006c10spc300; v200r006c10spc300pwe; +23 more · source: NVD
AF
Ar200 Firmware · Huawei
v200r006c10; v200r006c10pwe; v200r006c10spc100; v200r006c10spc300; v200r006c10spc300pwe; v200r007c00; +17 more · source: NVD
AF
Ar200-s Firmware · Huawei
v200r006c10; v200r006c10spc300; v200r007c00; v200r007c00spc100; v200r007c00spc200; v200r007c00spc600; +6 more · source: NVD