1. Home
  2. CVE Database
  3. CVE-2017-17250
MEDIUM · 6.5

CVE-2017-17250

Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200R005C32; AR200-S V200R005C32; AR2200-S V200R005C32; AR3200 V2...

Vulnerability Description

Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200R005C32; AR200-S V200R005C32; AR2200-S V200R005C32; AR3200 V200R005C32; V200R007C00; AR510 V200R005C32; NetEngine16EX V200R005C32; SRG1300 V200R005C32; SRG2300 V200R005C32; SRG3300 V200R005C32 have an out-of-bounds write vulnerability. When a user executes a query command after the device received an abnormal OSPF message, the software writes data past the end of the intended buffer due to the insufficient verification of the input data. An unauthenticated, remote attacker could exploit this vulnerability by sending abnormal OSPF messages to the device. A successful exploit could cause the system to crash.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
HuaweiAr120-S Firmwarev200r005c32
HuaweiAr120-S-
HuaweiAr1200 Firmwarev200r005c32
HuaweiAr1200-
HuaweiAr1200-S Firmwarev200r005c32
HuaweiAr1200-S-
HuaweiAr150 Firmwarev200r005c32
HuaweiAr150-
HuaweiAr160 Firmwarev200r005c32
HuaweiAr160-
HuaweiAr200 Firmwarev200r005c32
HuaweiAr200-
HuaweiAr200-S Firmwarev200r005c32
HuaweiAr200-S-
HuaweiAr150-S Firmwarev200r005c32
HuaweiAr150-S-
HuaweiAr2200-S Firmwarev200r005c32
HuaweiAr2200-S-
HuaweiAr3200 Firmwarev200r005c32
HuaweiAr3200-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2017-17250?

CVE-2017-17250 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200R005C32; AR200-S V200R005C32; AR2200-S V200R005C32; AR3200 V2...

How severe is CVE-2017-17250?

CVE-2017-17250 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-17250?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ar120-S Firmware, Huawei Ar120-S, Huawei Ar1200 Firmware, Huawei Ar1200, Huawei Ar1200-S Firmware.