CVE-2017-17330
Severity Score
3.3
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.
Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20 y V500R002C00 tienen una vulnerabilidad de filtrado de memoria. El software no libera la memoria asignada correctamente al analizar los datos de elementos XML. Un atacante autenticado podría subir un archivo XML manipulado, por lo que la explotación exitosa de esta vulnerabilidad podría provocar que los servicios del sistema funcionen de manera incorrecta, ya que se quedarían sin memoria.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-12-04 CVE Reserved
- 2018-03-09 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-772: Missing Release of Resource after Effective Lifetime
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-en | 2019-10-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r005c32 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r005c32" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r006c11 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r006c11" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r007c01 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r007c01" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r008c00 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r008c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r008c10 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r008c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r008c20 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r008c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r008c30 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r008c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ngfw Module Firmware Search vendor "Huawei" for product "Ngfw Module Firmware" | v500r001c00 Search vendor "Huawei" for product "Ngfw Module Firmware" and version "v500r001c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ngfw Module Search vendor "Huawei" for product "Ngfw Module" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ngfw Module Firmware Search vendor "Huawei" for product "Ngfw Module Firmware" | v500r001c20 Search vendor "Huawei" for product "Ngfw Module Firmware" and version "v500r001c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ngfw Module Search vendor "Huawei" for product "Ngfw Module" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ngfw Module Firmware Search vendor "Huawei" for product "Ngfw Module Firmware" | v500r002c00 Search vendor "Huawei" for product "Ngfw Module Firmware" and version "v500r002c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ngfw Module Search vendor "Huawei" for product "Ngfw Module" | - | - |
Safe
|