CVE-2017-15324: huawei technologies co., ltd. s12700 Improper Input Validation
Vulnerability summary
CVE-2017-15324 is a high (CVSS 7.8) Improper Input Validation vulnerability in huawei technologies co., ltd. s12700. EPSS estimates a 1.29% chance of exploitation in the next 30 days, higher than 69.9% of scored vulnerabilities.
Timeline
- 22-12-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.29%
Chance of exploitation in the next 30 days
Percentile
70%
Versus all other CVEs
30-day change
0.00 pp
From 1.29% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Huawei technologies co., ltd.7 products
- s12700V200R006C00 | V200R007C00 | V200R007C01 | V200R007C20 | V200R008C00 | V200R009C00 | V200R010C00
- s1700V200R006C10 | V200R009C00 | V200R010C00
- s2700V200R006C00 | V200R006C10 | V200R007C00 | V200R008C00 | V200R009C00 | V200R010C00 | V200R011C00
- s5700V200R005C00 | V200R006C00 | V200R007C00 | V200R008C00 | V200R009C00 | V200R010C00 | V200R011C00
- s6700V200R005C00 | V200R008C00 | V200R009C00 | V200R010C00
Huawei2 products
- s5700_firmwarev200r005c00
- s6700_firmwarev200r005c00
2 vendors · 9 products
References
1 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-enX Refsource CONFIRMVendor Advisory