CVE-2017-15317

Published: Dec 22, 2017

Modified: Sep 17, 2024

PUBLISHED

Description

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.

Vendor	Product	Versions
Huawei Technologies Co., Ltd.	AR120-S	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei Technologies Co., Ltd.	AR1200	affected `V200R006C10` affected `V200R006C13` affected `V200R007C00` affected `V200R007C01` affected `V200R007C02` +2 more versions
Huawei Technologies Co., Ltd.	AR1200-S	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei Technologies Co., Ltd.	AR150	affected `V200R006C10` affected `V200R007C00` affected `V200R007C01` affected `V200R007C02` affected `V200R008C20` +1 more versions
Huawei Technologies Co., Ltd.	AR150-S	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei Technologies Co., Ltd.	AR160	affected `V200R006C10` affected `V200R006C12` affected `V200R007C00` affected `V200R007C01` affected `V200R007C02` +2 more versions
Huawei Technologies Co., Ltd.	AR200	affected `V200R006C10` affected `V200R007C00` affected `V200R007C01` affected `V200R008C20` affected `V200R008C30`
Huawei Technologies Co., Ltd.	AR200-S	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei Technologies Co., Ltd.	AR2200	affected `V200R006C10` affected `V200R006C13` affected `V200R006C16` affected `V200R007C00` affected `V200R007C01` +3 more versions
Huawei Technologies Co., Ltd.	AR2200-S	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei Technologies Co., Ltd.	AR3200	affected `V200R006C10` affected `V200R006C11` affected `V200R007C00` affected `V200R007C01` affected `V200R007C02` +4 more versions
Huawei Technologies Co., Ltd.	AR510	affected `V200R006C10` affected `V200R006C12` affected `V200R006C13` affected `V200R006C15` affected `V200R006C16` +4 more versions
Huawei Technologies Co., Ltd.	SRG1300	affected `V200R006C10` affected `V200R007C00` affected `V200R007C02` affected `V200R008C20` affected `V200R008C30`
Huawei Technologies Co., Ltd.	SRG2300	affected `V200R006C10` affected `V200R007C00` affected `V200R007C02` affected `V200R008C20` affected `V200R008C30`
Huawei Technologies Co., Ltd.	SRG3300	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-15317

Description

Affected Products

References