Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could cause system reboot.
References
Link | Resource |
---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-02-sctp-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2018-02-15 16:29
Updated : 2024-02-28 16:25
NVD link : CVE-2017-15344
Mitre link : CVE-2017-15344
CVE.ORG link : CVE-2017-15344
JSON object : View
Products Affected
huawei
- ar120-s_firmware
- ar3200_firmware
- ar3200
- ar1200_firmware
CWE
CWE-190
Integer Overflow or Wraparound