High severity · published Nov 22, 2017
CVE-2017-2700
AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability
7.5
CVSS
0.9%
EPSS
No
On KEV
Description
AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ac6005 Firmware · Huawei
v200r006c10 · source: NVD
AF
Ac6605 Firmware · Huawei
v200r006c10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-2700
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-2700
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170517-01-ac-en
www.securityfocus.com
http://www.securityfocus.com/bid/102166
More from Ac6005 Firmware
7.5
CVE-2017-8147
AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200…
6.5
CVE-2016-6824
Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart)…