low3.1
CVE-2017-17282
SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 …
Impact
SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation, successful exploit may cause some service abnormal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Dp300 Firmware | Version v500r002c00 |
| Huawei | Rp200 Firmware | Versions v500r002c00, v600r006c00 |
| Huawei | Te30 Firmware | Versions v100r001c10, v500r002c00, v600r006c00 |
| Huawei | Te40 Firmware | Versions v500r002c00, v600r006c00 |
| Huawei | Te50 Firmware | Versions v500r002c00, v600r006c00 |
| Huawei | Te60 Firmware | Versions v100r001c10, v500r002c00, v600r006c00 |