CVE-2017-2690
Severity Score
5.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C20, V200R003C30,eSpace U1981 with software V200R003C20 and V200R003C30 have an denial of service (DoS) vulnerability, which allow an attacker with specific permission to craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition.
SoftCo con software V200R003C20; eSpace U1910 con software V200R003C00, V200R003C20 y V200R003C30; eSpace U1911 con software V200R003C20 y V200R003C30; eSpace U1930 con software V200R003C20 y V200R003C30; eSpace U1960 con software V200R003C20 y V200R003C30; eSpace U1980 con software V200R003C20 y V200R003C30; y eSpace U1981 con software V200R003C20 y V200R003C30 tienen una vulnerabilidad de denegación de servicio (DoS). Esta permite que un atacante con permisos específicos manipule un archivo que contenga datos maliciosos y lo suba al dispositivo para agotar la memoria, provocando una condición DoS.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-12-01 CVE Reserved
- 2017-11-22 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/95382 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170111-01-parser-en | 2019-10-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Softco Firmware Search vendor "Huawei" for product "Softco Firmware" | v200r003c20 Search vendor "Huawei" for product "Softco Firmware" and version "v200r003c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Softco Search vendor "Huawei" for product "Softco" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1910 Firmware Search vendor "Huawei" for product "Espace U1910 Firmware" | v200r003c00 Search vendor "Huawei" for product "Espace U1910 Firmware" and version "v200r003c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1910 Search vendor "Huawei" for product "Espace U1910" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1910 Firmware Search vendor "Huawei" for product "Espace U1910 Firmware" | v200r003c20 Search vendor "Huawei" for product "Espace U1910 Firmware" and version "v200r003c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1910 Search vendor "Huawei" for product "Espace U1910" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1910 Firmware Search vendor "Huawei" for product "Espace U1910 Firmware" | v200r003c30 Search vendor "Huawei" for product "Espace U1910 Firmware" and version "v200r003c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1910 Search vendor "Huawei" for product "Espace U1910" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1911 Firmware Search vendor "Huawei" for product "Espace U1911 Firmware" | v200r003c20 Search vendor "Huawei" for product "Espace U1911 Firmware" and version "v200r003c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1911 Search vendor "Huawei" for product "Espace U1911" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1911 Firmware Search vendor "Huawei" for product "Espace U1911 Firmware" | v200r003c30 Search vendor "Huawei" for product "Espace U1911 Firmware" and version "v200r003c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1911 Search vendor "Huawei" for product "Espace U1911" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1930 Firmware Search vendor "Huawei" for product "Espace U1930 Firmware" | v200r003c20 Search vendor "Huawei" for product "Espace U1930 Firmware" and version "v200r003c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1930 Search vendor "Huawei" for product "Espace U1930" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1930 Firmware Search vendor "Huawei" for product "Espace U1930 Firmware" | v200r003c30 Search vendor "Huawei" for product "Espace U1930 Firmware" and version "v200r003c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1930 Search vendor "Huawei" for product "Espace U1930" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1960 Firmware Search vendor "Huawei" for product "Espace U1960 Firmware" | v200r003c20 Search vendor "Huawei" for product "Espace U1960 Firmware" and version "v200r003c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1960 Search vendor "Huawei" for product "Espace U1960" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1960 Firmware Search vendor "Huawei" for product "Espace U1960 Firmware" | v200r003c30 Search vendor "Huawei" for product "Espace U1960 Firmware" and version "v200r003c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1960 Search vendor "Huawei" for product "Espace U1960" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1980 Firmware Search vendor "Huawei" for product "Espace U1980 Firmware" | v200r003c20 Search vendor "Huawei" for product "Espace U1980 Firmware" and version "v200r003c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1980 Search vendor "Huawei" for product "Espace U1980" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1980 Firmware Search vendor "Huawei" for product "Espace U1980 Firmware" | v200r003c30 Search vendor "Huawei" for product "Espace U1980 Firmware" and version "v200r003c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1980 Search vendor "Huawei" for product "Espace U1980" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1981 Firmware Search vendor "Huawei" for product "Espace U1981 Firmware" | v200r003c20 Search vendor "Huawei" for product "Espace U1981 Firmware" and version "v200r003c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1981 Search vendor "Huawei" for product "Espace U1981" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Espace U1981 Firmware Search vendor "Huawei" for product "Espace U1981 Firmware" | v200r003c30 Search vendor "Huawei" for product "Espace U1981 Firmware" and version "v200r003c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Espace U1981 Search vendor "Huawei" for product "Espace U1981" | - | - |
Safe
|