CVE-2017-17144

CWE-119 — Buffer Overflow3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.2%
top 60.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
Huawei Dp300 FirmwareHuawei Espace U1960 FirmwareHuawei Espace U1981 Firmware+9 more
Timeline
PublishedMar 5
Latest updateMay 14

Description

Backup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC300T; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC700; V500R002C00T; TE30 V100R001C10; V100R001C10SPC100; V100R001C10SPC200B010…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages12 packages

▶NVDhuawei/espace_u1960_firmwarev200r003c30spc200
▶NVDhuawei/espace_u1981_firmwarev100r001c20spc700, v200r003c20spca00+1
▶NVDhuawei/te30_firmware15 versions+14
▶NVDhuawei/te40_firmware6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-42x3-933p-vr75: Backup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC50↗2022-05-14
▶
CVEList
CVE-2017-17144: Backup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC50↗2018-03-05
▶