high7.5
CVE-2017-15343
Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer …
Impact
Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could system reboot.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ar120-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar1200 Firmware | Versions v200r007c01, v200r007c02 |
| Huawei | Ar3200 Firmware | Versions v200r006c11, v200r008c00, v200r008c10 |