CVE-2017-17148

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 95.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Dp300 FirmwareHuawei Technologies Co., Ltd. Dp300
Timeline
PublishedMar 9
Latest updateMay 14

Description

Huawei DP300 V500R002C00 have a DoS vulnerability due to the lack of validation when the malloc is called. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/dp300_firmwarev500r002c00

🔴Vulnerability Details

2
GHSA
GHSA-cfpg-c922-pjjc: Huawei DP300 V500R002C00 have a DoS vulnerability due to the lack of validation when the malloc is called↗2022-05-14
▶
CVEList
CVE-2017-17148: Huawei DP300 V500R002C00 have a DoS vulnerability due to the lack of validation when the malloc is called↗2018-03-09
▶
CVE-2017-17148 (MEDIUM CVSS 5.5) | Huawei DP300 V500R002C00 have a DoS | cvebase.io