CVE-2017-17254

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
7.5HIGH
EPSS
0.1%
top 64.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
45
Huawei Ar120-s FirmwareHuawei Ar1200-s FirmwareHuawei Ar1200 Firmware+42 more
Timeline
PublishedApr 24
Latest updateMay 14

Description

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages45 packages

▶NVDhuawei/ar1200_firmware7 versions+6
▶NVDhuawei/ar1200-s_firmware4 versions+3
▶NVDhuawei/ngfw_module_firmware7 versions+6
▶NVDhuawei/ar150_firmware6 versions+5
▶NVDhuawei/ar200_firmware5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-qxfc-fv7j-h3gq: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20↗2022-05-14
▶
CVEList
CVE-2017-17254: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20↗2018-04-24
▶