NetSight
medium6.5

CVE-2017-8162

AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, …

Impact

AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR150-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR160 with software V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR200 with software V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30,AR200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR2200 with software V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR2200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30,AR510 with software V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30,NetEngine16EX with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,SMC2.0 with software V100R003C10, V100R005C00, V500R002C00, V600R006C00,SRG1300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG2300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG3300 with software V200R006C10, V200R007C00, V200R008C20, V200R008C30 have a DoS vulnerability. Due to incorrect malformed message processing logic, an authenticated, remote attacker could send specially crafted message to the target device.Successful exploit of the vulnerability could cause stack overflow and make a service unavailable.

Affected products

VendorProductAffected versions
HuaweiAr120-S Firmware
Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30
HuaweiAr1200 Firmware
Versions v200r006c10, v200r006c13, v200r007c00, v200r007c01, v200r007c02, v200r008c20
HuaweiAr1200-S Firmware
Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30
HuaweiAr150 Firmware
Versions v200r006c10, v200r007c00, v200r007c01, v200r007c02, v200r008c20, v200r008c30
HuaweiAr150-S Firmware
Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30
HuaweiAr160 Firmware
Versions v200r006c10, v200r006c12, v200r007c00, v200r007c01, v200r007c02, v200r008c20
HuaweiAr200 Firmware
Versions v200r006c10, v200r007c00, v200r007c01, v200r008c20, v200r008c30
HuaweiAr200-S Firmware
Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30
HuaweiAr2200 Firmware
Versions v200r006c10, v200r006c13, v200r006c16pwe, v200r007c00, v200r007c01, v200r007c02
HuaweiAr2200-S Firmware
Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30
HuaweiAr3200 Firmware
Versions v200r006c10, v200r006c11, v200r007c00, v200r007c01, v200r007c02, v200r008c00
HuaweiAr510 Firmware
Versions v200r006c10, v200r006c12, v200r006c13, v200r006c15, v200r006c16, v200r006c17

Weakness classification

References