cbcvebase.
CVE-2017-17282
published 2018-03-09

CVE-2017-17282: SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40…

PriorityP410low3.1CVSS 3.0
AVAACHPRNUINSUCNINAL
EPSS
0.30%
21.7th percentile
SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation, successful exploit may cause some service abnormal.

Affected

13 ranges
VendorProductVersion rangeFixed in
huaweidp300_firmware——
huaweirp200_firmware——
huaweirp200_firmware——
huaweite30_firmware——
huaweite30_firmware——
huaweite30_firmware——
huaweite40_firmware——
huaweite40_firmware——
huaweite50_firmware——
huaweite50_firmware——
huaweite60_firmware——
huaweite60_firmware——
huaweite60_firmware——

CVSS provenance

nvdv3.03.1LOWCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
nvdv2.02.9LOWAV:A/AC:M/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.