CVE-2017-2712: huawei technologies co., ltd. s3300 Communication Channel Errors

Vulnerability summary

CVE-2017-2712 is a medium (CVSS 5.3) Communication Channel Errors vulnerability in huawei technologies co., ltd. s3300. EPSS estimates a 1.13% chance of exploitation in the next 30 days, higher than 65.8% of scored vulnerabilities.

Timeline

1. 22-11-2017
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping.

• CWE-417Communication Channel ErrorsWeaknesses in this category are related to improper handling of communication channels and access paths. These weaknesses include problems in creating, managing, or removing alternate channels and alternate paths. Some of these can overlap virtual file problems and are commonly used in "bypass" attacks, such as those that exploit authentication errors.