CVE-2017-17199: huawei technologies co., ltd. dp300; rp200; te30; te40; te50; te60 Out-of-bounds Read
Vulnerability summary
CVE-2017-17199 is a medium (CVSS 5.9) Out-of-bounds Read vulnerability in huawei technologies co., ltd. dp300; rp200; te30; te40; te50; te60. EPSS estimates a 0.73% chance of exploitation in the next 30 days, higher than 53.6% of scored vulnerabilities.
Timeline
- 09-03-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the device read out of bounds and probably make a service unavailable.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.73%
Chance of exploitation in the next 30 days
Percentile
54%
Versus all other CVEs
30-day change
0.00 pp
From 0.73% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Huawei6 products
- dp300_firmwarev500r002c00
- rp200_firmwarev500r002c00 | v600r006c00
- te30v100r001c10 | v500r002c00 | v600r006c00
- te40v500r002c00 | v600r006c00
- te50v500r002c00 | v600r006c00
Huawei technologies co., ltd.1 product
- dp300; rp200; te30; te40; te50; te60DP300 V500R002C00 | RP200 V500R002C00 | V600R006C00 | TE30 V100R001C10 | V500R002C00 | TE40 V500R002C00 | TE50 V500R002C00 | TE60 V100R001C10
2 vendors · 7 products
References
1 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-03-h323-enX Refsource CONFIRMVendor Advisory