Vulnerability   
Search   
    Search 211766 CVE descriptions
and 97459 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.107842
Category:Huawei
Title:Huawei Data Communication: Buffer Overflow Vulnerability in Some Huawei Products (huawei-sa-20171213-01-ike)
Summary:Some Huawei products have a buffer overflow vulnerability due to incomplete range checks of the input data.
Description:Summary:
Some Huawei products have a buffer overflow vulnerability due to incomplete range checks of the input data.

Vulnerability Insight:
An unauthenticated, remote attacker could exploit this vulnerability by sending malicious
IKE packets to the targeted device. An exploit could allow the attacker to cause the device to write out of bounds and restart.
(Vulnerability ID: HWPSIRT-2017-02047)

Vulnerability Impact:
An attacker can exploit this vulnerability to make the device write out of bounds and restart.

Affected Software/OS:
AR120-S versions V200R006C10SPC300 V200R007C00SPC900

AR1200 versions V200R006C10SPC300 V200R006C13 V200R007C00SPC900 V200R007C02

AR1200-S versions V200R006C10SPC300 V200R007C00SPC900 V200R008C20SPC800PWE

AR150 versions V200R006C10SPC300 V200R007C00SPC900 V200R007C02

AR150-S versions V200R006C10SPC300 V200R007C00SPC900

AR160 versions V200R006C10SPC300 V200R006C12 V200R007C00SPC900 V200R007C02

AR200 versions V200R006C10SPC300 V200R007C00SPC900

AR200-S versions V200R006C10SPC300 V200R007C00SPC900

AR2200 versions V200R006C10SPC300 V200R006C13 V200R006C16PWE V200R007C00SPC900 V200R007C02

AR2200-S versions V200R006C10SPC300 V200R007C00SPC900 V200R008C20SPC800PWE

AR3200 versions V200R006C10SPC200 V200R006C11 V200R007C00 V200R007C02

AR3600 versions V200R006C10SPC300 V200R007C00SPC900

AR510 versions V200R006C12 V200R006C13 V200R006C15 V200R006C16 V200R006C17 V200R007C00SPC900

DBS3900 TDD LTE versions V100R003C00 V100R004C10

NetEngine16EX versions V200R006C10SPC300 V200R007C00SPC900

SRG1300 versions V200R006C10SPC300 V200R007C00SPC900 V200R007C02

SRG2300 versions V200R006C10SPC300 V200R007C00SPC900 V200R007C02

SRG3300 versions V200R006C10SPC300 V200R007C00SPC900.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
7.1

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2017-17160
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

This is only one of 97459 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.