Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.107822
Kategorie:Huawei
Titel:Huawei Data Communication: Out-Of-Bounds Read Vulnerability in Some Huawei Products (huawei-sa-20180131-01-sip)
Zusammenfassung:Some Huawei products have an out-of-bounds read vulnerability due to insufficient input validation.
Beschreibung:Summary:
Some Huawei products have an out-of-bounds read vulnerability due to insufficient input validation.

Vulnerability Insight:
Some Huawei products have an out-of-bounds read vulnerability due to insufficient input validation. An unauthenticated, remote attacker could exploit this vulnerability by sending malformed Session Initiation Protocol(SIP) packets to the target device. Successful exploit could make the device read out of bounds and thus cause a service to be unavailable. (Vulnerability ID: HWPSIRT-2017-11043)This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-17202.Huawei has released software updates to fix this vulnerability. This advisory is available in the linked references.

Vulnerability Impact:
Successful exploit could make the device read out of bounds and thus cause a server to be unavailable.

Affected Software/OS:
AR120-S versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30

AR1200 versions V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30

AR1200-S versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30

AR150 versions V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30

AR150-S versions V200R005C32 V200R007C00 V200R008C20 V200R008C30

AR160 versions V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30

AR200 versions V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R008C20 V200R008C30

AR200-S versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30

AR2200 versions V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30

AR2200-S versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30

AR3200 versions V200R005C32 V200R006C10 V200R006C11 V200R007C00 V200R007C01 V200R007C02 V200R008C00 V200R008C10 V200R008C20 V200R008C30

AR3600 versions V200R006C10 V200R007C00 V200R007C01 V200R008C20

AR510 versions V200R005C32 V200R006C10 V200R007C00SPC600 V200R008C20 V200R008C30

NetEngine16EX versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30

SRG1300 versions V200R005C32 V200R006C10 V200R007C00 V200R007C02 V200R008C20 V200R008C30

SRG2300 versions V200R005C32 V200R006C10 V200R007C00 V200R007C02 V200R008C20 V200R008C30

SRG3300 versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2017-17202
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.