CVE-2017-17283: huawei technologies co., ltd. dp300,rp200,te30,te40,te50,te60 Improper Input Validation

Vulnerability summary

CVE-2017-17283 is a medium (CVSS 5.3) Improper Input Validation vulnerability in huawei technologies co., ltd. dp300,rp200,te30,te40,te50,te60. EPSS estimates a 1.21% chance of exploitation in the next 30 days, higher than 67.9% of scored vulnerabilities.

Timeline

1. 15-02-2018
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00 have an out-of-bound read vulnerability. A remote attacker send specially crafted Session Initiation Protocol (SIP) messages to the affected products. Due to insufficient input validation, successful exploit will cause some services abnormal.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.