NetSight
high7.5

CVE-2017-15319

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V50…

Impact

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system.

Affected products

VendorProductAffected versions
HuaweiRp200 Firmware
Versions v500r002c00, v600r006c00
HuaweiTe30 Firmware
Versions v100r001c10, v500r002c00, v600r006c00
HuaweiTe40 Firmware
Versions v500r002c00, v600r006c00
HuaweiTe50 Firmware
Versions v500r002c00, v600r006c00
HuaweiTe60 Firmware
Versions v100r001c10, v500r002c00, v600r006c00

Weakness classification

References