CVE-2017-15319: huawei technologies co., ltd. rp200 Out-of-bounds Read
Vulnerability summary
CVE-2017-15319 is a high (CVSS 7.8) Out-of-bounds Read vulnerability in huawei technologies co., ltd. rp200. EPSS estimates a 1.29% chance of exploitation in the next 30 days, higher than 69.9% of scored vulnerabilities.
Timeline
- 22-12-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.29%
Chance of exploitation in the next 30 days
Percentile
70%
Versus all other CVEs
30-day change
0.00 pp
From 1.29% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Huawei5 products
- rp200_firmwarev500r002c00 | v600r006c00
- te30v100r001c10 | v500r002c00 | v600r006c00
- te40v500r002c00 | v600r006c00
- te50v500r002c00 | v600r006c00
- te60_firmwarev100r001c10 | v500r002c00 | v600r006c00
2 vendors · 10 products
References
1 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-enX Refsource CONFIRMVendor Advisory