CVE-2017-17147

CWE-190 — Integer Overflow3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 94.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Dp300 FirmwareHuawei Technologies Co., Ltd. Dp300
Timeline
PublishedMar 9
Latest updateMay 14

Description

Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/dp300_firmwarev500r002c00

🔴Vulnerability Details

2
GHSA
GHSA-88fx-rfrx-5ff6: Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation↗2022-05-14
▶
CVEList
CVE-2017-17147: Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation↗2018-03-09
▶
CVE-2017-17147 (MEDIUM CVSS 5.5) | Huawei DP300 V500R002C00 have an in | cvebase.io