1. Home
  2. CVE Database
  3. CVE-2017-15350
MEDIUM · 5.3

CVE-2017-15350

The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V10...

Vulnerability Description

The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10,SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3206 V100R002C00, V100R002C10,USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50 haa a buffer overflow vulnerability. An unauthenticated, remote attacker could exploit this vulnerability by sending specially crafted message to the affected products. The vulnerability is due to insufficient input validation of the message, which could result in a buffer overflow. Successful exploit may cause some services abnormal.

CVSS Score

5.3

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
HuaweiDp300 Firmwarev500r002c00
HuaweiDp300-
HuaweiIps Module Firmwarev100r001c10
HuaweiIps Module-
HuaweiNgfw Module Firmwarev100r001c10
HuaweiNgfw Module-
HuaweiNip6300 Firmwarev500r001c00
HuaweiNip6300-
HuaweiNip6600 Firmwarev500r001c00
HuaweiNip6600-
HuaweiNip6800 Firmwarev500r001c50
HuaweiNip6800-
HuaweiSvn5800-C Firmwarev200r003c00
HuaweiSvn5800-C-
HuaweiRp200 Firmwarev500r002c00
HuaweiRp200-
HuaweiSvn5600 Firmwarev200r003c00
HuaweiSvn5600-
HuaweiSvn5800 Firmwarev200r003c00
HuaweiSvn5800-

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2017-15350?

CVE-2017-15350 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V10...

How severe is CVE-2017-15350?

CVE-2017-15350 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-15350?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Dp300 Firmware, Huawei Dp300, Huawei Ips Module Firmware, Huawei Ips Module, Huawei Ngfw Module Firmware.