5.3

CVE-2017-15350

The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10,SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3206 V100R002C00, V100R002C10,USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50 haa a buffer overflow vulnerability. An unauthenticated, remote attacker could exploit this vulnerability by sending specially crafted message to the affected products. The vulnerability is due to insufficient input validation of the message, which could result in a buffer overflow. Successful exploit may cause some services abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Dp300 Firmware Version v500r002c00
   Huawei ≫ Dp300 Version -
Huawei ≫ Ips Module Firmware Version v100r001c10
   Huawei ≫ Ips Module Version -
Huawei ≫ Ips Module Firmware Version v100r001c20
   Huawei ≫ Ips Module Version -
Huawei ≫ Ips Module Firmware Version v100r001c30
   Huawei ≫ Ips Module Version -
Huawei ≫ Ips Module Firmware Version v500r001c00
   Huawei ≫ Ips Module Version -
Huawei ≫ Ips Module Firmware Version v500r001c20
   Huawei ≫ Ips Module Version -
Huawei ≫ Ips Module Firmware Version v500r001c30
   Huawei ≫ Ips Module Version -
Huawei ≫ Ips Module Firmware Version v500r001c50
   Huawei ≫ Ips Module Version -
Huawei ≫ Ngfw Module Firmware Version v100r001c10
   Huawei ≫ Ngfw Module Version -
Huawei ≫ Ngfw Module Firmware Version v100r001c20
   Huawei ≫ Ngfw Module Version -
Huawei ≫ Ngfw Module Firmware Version v100r001c30
   Huawei ≫ Ngfw Module Version -
Huawei ≫ Ngfw Module Firmware Version v500r001c00
   Huawei ≫ Ngfw Module Version -
Huawei ≫ Ngfw Module Firmware Version v500r001c20
   Huawei ≫ Ngfw Module Version -
Huawei ≫ Nip6300 Firmware Version v500r001c00
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6300 Firmware Version v500r001c20
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6300 Firmware Version v500r001c30
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6300 Firmware Version v500r001c50
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c00
   Huawei ≫ Nip6600 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c20
   Huawei ≫ Nip6600 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c30
   Huawei ≫ Nip6600 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c50
   Huawei ≫ Nip6600 Version -
Huawei ≫ Nip6800 Firmware Version v500r001c50
   Huawei ≫ Nip6800 Version -
Huawei ≫ Svn5800-c Firmware Version v200r003c00
   Huawei ≫ Svn5800-c Version -
Huawei ≫ Svn5800-c Firmware Version v200r003c10
   Huawei ≫ Svn5800-c Version -
Huawei ≫ Rp200 Firmware Version v500r002c00
   Huawei ≫ Rp200 Version -
Huawei ≫ Rp200 Firmware Version v600r006c00
   Huawei ≫ Rp200 Version -
Huawei ≫ Svn5600 Firmware Version v200r003c00
   Huawei ≫ Svn5600 Version -
Huawei ≫ Svn5600 Firmware Version v200r003c10
   Huawei ≫ Svn5600 Version -
Huawei ≫ Svn5800 Firmware Version v200r003c00
   Huawei ≫ Svn5800 Version -
Huawei ≫ Svn5800 Firmware Version v200r003c10
   Huawei ≫ Svn5800 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v100r001c10
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v100r001c20
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v100r001c30
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c00
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c20
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c50
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v100r001c10
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v100r001c20
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v100r001c30
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c00
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c20
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c50
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v100r001c10
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v100r001c20
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v100r001c30
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c00
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c20
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c50
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Te30 Firmware Version v100r001c02
   Huawei ≫ Te30 Version -
Huawei ≫ Te30 Firmware Version v100r001c10
   Huawei ≫ Te30 Version -
Huawei ≫ Te30 Firmware Version v500r002c00
   Huawei ≫ Te30 Version -
Huawei ≫ Te30 Firmware Version v600r006c00
   Huawei ≫ Te30 Version -
Huawei ≫ Te40 Firmware Version v500r002c00
   Huawei ≫ Te40 Version -
Huawei ≫ Te40 Firmware Version v600r006c00
   Huawei ≫ Te40 Version -
Huawei ≫ Te50 Firmware Version v500r002c00
   Huawei ≫ Te50 Version -
Huawei ≫ Te50 Firmware Version v600r006c00
   Huawei ≫ Te50 Version -
Huawei ≫ Te60 Firmware Version v100r001c01
   Huawei ≫ Te60 Version -
Huawei ≫ Te60 Firmware Version v100r001c10
   Huawei ≫ Te60 Version -
Huawei ≫ Te60 Firmware Version v500r002c00
   Huawei ≫ Te60 Version -
Huawei ≫ Te60 Firmware Version v600r006c00
   Huawei ≫ Te60 Version -
Huawei ≫ Tp3206 Firmware Version v100r002c00
   Huawei ≫ Tp3206 Version -
Huawei ≫ Tp3206 Firmware Version v100r002c10
   Huawei ≫ Tp3206 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c00
   Huawei ≫ Usg9500 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c20
   Huawei ≫ Usg9500 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c30
   Huawei ≫ Usg9500 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c50
   Huawei ≫ Usg9500 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.22% 0.655
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-buffer-en
Vendor Advisory