medium5.9
CVE-2017-17151
Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX,…
Impact
Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and ViewPoint 9030 have an insufficient validation vulnerability. Since packet validation is insufficient, an unauthenticated attacker may send special H323 packets to exploit the vulnerability. Successful exploit could allow the attacker to send malicious packets and result in DOS attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ar100 Firmware | Versions v200r008c20spc700, v200r008c20spc700pwe, v200r008c20spc800, v200r008c20spc800pwe, v200r008c30 |
| Huawei | Ar100-S Firmware | Versions v200r007c00spca00, v200r007c00spcb00, v200r008c20, v200r008c20spc700, v200r008c20spc800, v200r008c20spc800pwe |
| Huawei | Ar110-S Firmware | Versions v200r007c00spc600, v200r007c00spc900, v200r007c00spcb00, v200r008c20spc800, v200r008c30 |
| Huawei | Ar120 Firmware | Versions v200r006c10, v200r006c10spc300, v200r006c10spc300pwe, v200r007c00, v200r007c00pwe, v200r007c00spc100 |
| Huawei | Ar120-S Firmware | Versions v200r006c10, v200r006c10spc300, v200r007c00, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600 |
| Huawei | Ar1200 Firmware | Versions v200r006c10, v200r006c10pwe, v200r006c10spc030, v200r006c10spc300, v200r006c10spc300pwe, v200r006c10spc600 |
| Huawei | Ar1200-S Firmware | Versions v200r006c10, v200r006c10spc300, v200r007c00, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600 |
| Huawei | Ar150 Firmware | Versions v200r006c10, v200r006c10pwe, v200r006c10spc300, v200r006c10spc300pwe, v200r007c00, v200r007c00pwe |
| Huawei | Ar150-S Firmware | Versions v200r006c10spc300, v200r007c00, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600, v200r007c00spc900 |
| Huawei | Ar160 Firmware | Versions v200r006c10, v200r006c10pwe, v200r006c10spc100, v200r006c10spc200, v200r006c10spc300, v200r006c10spc300pwe |
| Huawei | Ar200 Firmware | Versions v200r006c10, v200r006c10pwe, v200r006c10spc100, v200r006c10spc300, v200r006c10spc300pwe, v200r007c00 |
| Huawei | Ar200-S Firmware | Versions v200r006c10, v200r006c10spc300, v200r007c00, v200r007c00spc100, v200r007c00spc200, v200r007c00spc600 |