CVE-2017-17146

CWE-119 — Buffer Overflow3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 80.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Dp300 FirmwareHuawei Technologies Co., Ltd. Dp300
Timeline
PublishedMar 9
Latest updateMay 13

Description

Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks or remote code execution on the device.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/dp300_firmwarev500r002c00

🔴Vulnerability Details

2
GHSA
GHSA-7q62-563j-jqfp: Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation↗2022-05-13
▶
CVEList
CVE-2017-17146: Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation↗2018-03-09
▶
CVE-2017-17146 (HIGH CVSS 7.8) | Huawei DP300 V500R002C00 have a buf | cvebase.io