CVE-2017-8163
AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, …
Impact
AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR150-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR160 with software V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR200 with software V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30,AR200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR2200 with software V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR2200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30,AR510 with software V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30,NetEngine16EX with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,SMC2.0 with software V100R003C10, V100R005C00, V500R002C00, V600R006C00,SRG1300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG2300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG3300 with software V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an out-of-bounds read vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send specially crafted message to the target device.Successful exploit of the vulnerability could cause out-of-bounds read and system crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ar120-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar1200 Firmware | Versions v200r006c10, v200r006c13, v200r007c00, v200r007c01, v200r007c02, v200r008c20 |
| Huawei | Ar1200-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar150 Firmware | Versions v200r006c10, v200r007c00, v200r007c01, v200r007c02, v200r008c20, v200r008c30 |
| Huawei | Ar150-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar160 Firmware | Versions v200r006c10, v200r006c12, v200r007c00, v200r007c01, v200r007c02, v200r008c20 |
| Huawei | Ar200 Firmware | Versions v200r006c10, v200r007c00, v200r007c01, v200r008c20, v200r008c30 |
| Huawei | Ar200-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar2200 Firmware | Versions v200r006c10, v200r006c13, v200r006c16pwe, v200r007c00, v200r007c01, v200r007c02 |
| Huawei | Ar2200-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar3200 Firmware | Versions v200r006c10, v200r006c11, v200r007c00, v200r007c01, v200r007c02, v200r008c00 |
| Huawei | Ar510 Firmware | Versions v200r006c10, v200r006c12, v200r006c13, v200r006c15, v200r006c16, v200r006c17 |