Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could cause system reboot.
References
Link | Resource |
---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-02-sctp-en | Vendor Advisory |
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-02-sctp-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 03:14
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-02-sctp-en - Vendor Advisory |
Information
Published : 2018-02-15 16:29
Updated : 2024-11-21 03:14
NVD link : CVE-2017-15344
Mitre link : CVE-2017-15344
CVE.ORG link : CVE-2017-15344
JSON object : View
Products Affected
huawei
- ar1200_firmware
- ar3200
- ar120-s_firmware
- ar3200_firmware
CWE
CWE-190
Integer Overflow or Wraparound