High severity · published Nov 22, 2017
CVE-2017-8147
AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200…
7.5
CVSS
1%
EPSS
No
On KEV
Description
AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 5800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 6800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 7800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 8800 with software V100R006C00, V200R001C00,E600 V200R008C00,S12700 with software V200R005C00, V200R006C00, V200R007C00, V200R008C00,S1700 with software V100R006C00, V100R007C00, V200R006C00,S2300 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S2700 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S5300 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S5700 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S6300 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R008C00,S6700 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S7700 with software V100R003C00, V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S9300 with software V100R001C00, V100R002C00, V100R003C00, V100R006C00, V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R008C10,S9700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,Secospace USG6600 V500R001C00SPC050 have a MaxAge LSA vulnerability due to improper OSPF implementation. When the device receives special LSA packets, the LS (Link Status) age would be set to MaxAge, 3600 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ac6005 Firmware · Huawei
v200r006c10spc200 · source: NVD
AF
Ac6605 Firmware · Huawei
v200r006c10spc200 · source: NVD
AF
Ar1200 Firmware · Huawei
v200r005c10cp0582t; v200r005c10hp0581t; v200r005c20spc026t · source: NVD
AF
Ar200 Firmware · Huawei
v200r005c20spc026t · source: NVD
AF
Ar3200 Firmware · Huawei
v200r005c20spc026t · source: NVD
C1
Cloudengine 12800 Firmware · Huawei
v100r003c00; v100r005c00; v100r005c10; v100r006c00; v200r001c00 · source: NVD
C5
Cloudengine 5800 Firmware · Huawei
v100r003c00; v100r005c00; v100r005c10; v100r006c00; v200r001c00 · source: NVD
C6
Cloudengine 6800 Firmware · Huawei
v100r003c00; v100r005c00; v100r005c10; v100r006c00; v200r001c00 · source: NVD
C7
Cloudengine 7800 Firmware · Huawei
v100r003c00; v100r005c00; v100r005c10; v100r006c00; v200r001c00 · source: NVD
C8
Cloudengine 8800 Firmware · Huawei
v100r006c00; v200r001c00 · source: NVD
EF
E600 Firmware · Huawei
v200r008c00 · source: NVD
SF
S12700 Firmware · Huawei
v200r005c00; v200r006c00; v200r007c00; v200r008c00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-8147
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-8147
Issue Tracking
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170720-01-ospf-en
More from Ac6005 Firmware
7.5
CVE-2017-2700
AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability
6.5
CVE-2016-6824
Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart)…