CVE-2017-17166
Severity Score
5.3
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, TP3206 V100R002C00, VP9660 V500R002C00, V500R002C10 have a resource exhaustion vulnerability. The software does not process certain field of H.323 message properly, a remote unauthenticated attacker could send crafted H.323 message to the device, successful exploit could cause certain service unavailable since the stack memory is exhausted.
Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, TP3206 V100R002C00, VP9660 V500R002C00 y V500R002C10 tienen una vulnerabilidad de agotamiento de recursos. El software no procesa ciertos campos de los mensajes H.323 correctamente, por lo que un atacante no autenticado podría enviar mensajes H.323 manipulados al dispositivo. Esto provocaría que ciertos servicios no estén disponibles ya que la memoria de la pila está agotada.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-12-04 CVE Reserved
- 2018-02-15 CVE Published
- 2024-08-05 CVE Updated
- 2024-10-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-02-h323-en | 2018-02-26 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Dp300 Firmware Search vendor "Huawei" for product "Dp300 Firmware" | v500r002c00 Search vendor "Huawei" for product "Dp300 Firmware" and version "v500r002c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Dp300 Search vendor "Huawei" for product "Dp300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6300 Firmware Search vendor "Huawei" for product "Secospace Usg6300 Firmware" | v500r001c00 Search vendor "Huawei" for product "Secospace Usg6300 Firmware" and version "v500r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6300 Search vendor "Huawei" for product "Secospace Usg6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6300 Firmware Search vendor "Huawei" for product "Secospace Usg6300 Firmware" | v500r001c20 Search vendor "Huawei" for product "Secospace Usg6300 Firmware" and version "v500r001c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6300 Search vendor "Huawei" for product "Secospace Usg6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6300 Firmware Search vendor "Huawei" for product "Secospace Usg6300 Firmware" | v500r001c30 Search vendor "Huawei" for product "Secospace Usg6300 Firmware" and version "v500r001c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6300 Search vendor "Huawei" for product "Secospace Usg6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6300 Firmware Search vendor "Huawei" for product "Secospace Usg6300 Firmware" | v500r001c50 Search vendor "Huawei" for product "Secospace Usg6300 Firmware" and version "v500r001c50" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6300 Search vendor "Huawei" for product "Secospace Usg6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6500 Firmware Search vendor "Huawei" for product "Secospace Usg6500 Firmware" | v500r001c00 Search vendor "Huawei" for product "Secospace Usg6500 Firmware" and version "v500r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6500 Search vendor "Huawei" for product "Secospace Usg6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6500 Firmware Search vendor "Huawei" for product "Secospace Usg6500 Firmware" | v500r001c20 Search vendor "Huawei" for product "Secospace Usg6500 Firmware" and version "v500r001c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6500 Search vendor "Huawei" for product "Secospace Usg6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6500 Firmware Search vendor "Huawei" for product "Secospace Usg6500 Firmware" | v500r001c30 Search vendor "Huawei" for product "Secospace Usg6500 Firmware" and version "v500r001c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6500 Search vendor "Huawei" for product "Secospace Usg6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6500 Firmware Search vendor "Huawei" for product "Secospace Usg6500 Firmware" | v500r001c50 Search vendor "Huawei" for product "Secospace Usg6500 Firmware" and version "v500r001c50" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6500 Search vendor "Huawei" for product "Secospace Usg6500" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware" | v500r001c00 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware" | v500r001c20 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware" | v500r001c30 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware" | v500r001c50 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c50" | - |
Affected
| in | Huawei Search vendor "Huawei" | Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Tp3206 Firmware Search vendor "Huawei" for product "Tp3206 Firmware" | v100r002c00 Search vendor "Huawei" for product "Tp3206 Firmware" and version "v100r002c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Tp3206 Search vendor "Huawei" for product "Tp3206" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9660 Firmware Search vendor "Huawei" for product "Vp9660 Firmware" | v500r002c00 Search vendor "Huawei" for product "Vp9660 Firmware" and version "v500r002c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9660 Search vendor "Huawei" for product "Vp9660" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Vp9660 Firmware Search vendor "Huawei" for product "Vp9660 Firmware" | v500r002c10 Search vendor "Huawei" for product "Vp9660 Firmware" and version "v500r002c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Vp9660 Search vendor "Huawei" for product "Vp9660" | - | - |
Safe
|