4.7

CVE-2017-15333

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,eCNS210_TD V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221, V100R004C10SPC400 has a DOS vulnerability. An attacker may craft specific XML files to the affected products. Due to not check the specially XML file and to parse this file, successful exploit will result in DOS attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ S12700 Firmware Version v200r005c00
   Huawei ≫ S12700 Version -
Huawei ≫ S1700 Firmware Version v200r009c00
   Huawei ≫ S1700 Version -
Huawei ≫ S1700 Firmware Version v200r010c00
   Huawei ≫ S1700 Version -
Huawei ≫ S5700 Firmware Version v200r001c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r002c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r003c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r003c02
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r005c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r006c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r007c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r008c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r009c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r010c00
   Huawei ≫ S5700 Version -
Huawei ≫ S6700 Firmware Version v200r001c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r002c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r003c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r005c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r005c02
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r008c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r009c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r010c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r001c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r002c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r003c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r005c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r005c02
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r008c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r009c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r010c00
   Huawei ≫ S6700 Version -
Huawei ≫ S7700 Firmware Version v200r001c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r002c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r003c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r005c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r006c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r007c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r008c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r009c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r010c00
   Huawei ≫ S7700 Version -
Huawei ≫ S9700 Firmware Version v200r001c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r002c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r003c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r005c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r006c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r007c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r008c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r009c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r010c00
   Huawei ≫ S9700 Version -
Huawei ≫ Ecns210 Td Firmware Version v100r004c10
   Huawei ≫ Ecns210 Td Version -
Huawei ≫ Ecns210 Td Firmware Version v100r004c10spc003
   Huawei ≫ Ecns210 Td Version -
Huawei ≫ Ecns210 Td Firmware Version v100r004c10spc100
   Huawei ≫ Ecns210 Td Version -
Huawei ≫ Ecns210 Td Firmware Version v100r004c10spc101
   Huawei ≫ Ecns210 Td Version -
Huawei ≫ Ecns210 Td Firmware Version v100r004c10spc102
   Huawei ≫ Ecns210 Td Version -
Huawei ≫ Ecns210 Td Firmware Version v100r004c10spc200
   Huawei ≫ Ecns210 Td Version -
Huawei ≫ Ecns210 Td Firmware Version v100r004c10spc221
   Huawei ≫ Ecns210 Td Version -
Huawei ≫ Ecns210 Td Firmware Version v100r004c10spc400
   Huawei ≫ Ecns210 Td Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.39
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.7 1 3.6
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-xml-en
Vendor Advisory