CVE-2017-17292

CWE-20 — Improper Input Validation3 documents3 sources
Severity
3.3LOW
EPSS
0.0%
top 93.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
26
Huawei Ar120-s FirmwareHuawei Ar1200-s FirmwareHuawei Ar1200 Firmware+23 more
Timeline
PublishedFeb 15
Latest updateMay 14

Description

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LExploitability: 1.8 | Impact: 1.4

Affected Packages26 packages

▶NVDhuawei/ar1200_firmware7 versions+6
▶NVDhuawei/ar1200-s_firmware4 versions+3
▶NVDhuawei/ar150_firmware6 versions+5
▶NVDhuawei/ar200_firmware5 versions+4
▶NVDhuawei/ar2200_firmware8 versions+7

🔴Vulnerability Details

2
GHSA
GHSA-7f2w-5jp8-5jq8: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20↗2022-05-14
▶
CVEList
CVE-2017-17292: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20↗2018-02-15
▶
CVE-2017-17292 (LOW CVSS 3.3) | Huawei AR120-S V200R006C10 | cvebase.io