CVE-2017-15349

CWE-7723 documents3 sources

Severity

7.5HIGH

EPSS

0.2%

top 61.22%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Cloudengine 12800 Firmware Huawei Cloudengine 5800 Firmware Huawei Cloudengine 6800 Firmware +1 more

Timeline

PublishedFeb 15

Latest updateMay 13

Description

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Resource ReServation Protocol (RSVP) packets to the affected products. Due to not release the memory to handle the packets, successful explo…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶NVDhuawei/cloudengine_5800_firmware4 versions+3

▶NVDhuawei/cloudengine_6800_firmware4 versions+3

▶NVDhuawei/cloudengine_7800_firmware4 versions+3

▶NVDhuawei/cloudengine_12800_firmware4 versions+3

🔴Vulnerability Details

GHSA

GHSA-hqf3-w8jr-9qmr: Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudE↗2022-05-13

▶

CVEList

CVE-2017-15349: Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudE↗2018-02-15

▶