Vulnerability Description
Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the device read out of bounds and probably make a service unavailable.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Dp300 Firmware | v500r002c00 |
| Huawei | Dp300 | - |
| Huawei | Rp200 Firmware | v500r002c00 |
| Huawei | Rp200 | - |
| Huawei | Te30 Firmware | v100r001c10 |
| Huawei | Te30 | - |
| Huawei | Te40 Firmware | v500r002c00 |
| Huawei | Te40 | - |
| Huawei | Te50 Firmware | v500r002c00 |
| Huawei | Te50 | - |
| Huawei | Te60 Firmware | v100r001c10 |
| Huawei | Te60 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-03-h323-enVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-03-h323-enVendor Advisory
FAQ
What is CVE-2017-17199?
CVE-2017-17199 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R...
How severe is CVE-2017-17199?
CVE-2017-17199 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-17199?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Dp300 Firmware, Huawei Dp300, Huawei Rp200 Firmware, Huawei Rp200, Huawei Te30 Firmware.