5.5
CVE-2017-17150
- EPSS 0.19%
- Veröffentlicht 09.03.2018 17:29:00
- Zuletzt bearbeitet 21.11.2024 03:17:35
- Erkennungen
LoginTimergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an DoS vulnerability due to insufficient validation of the parameter. An authenticated local attacker may call a special API with special parameter, which cause an infinite loop. Successful exploit of this vulnerability can allow an attacker to launch DOS attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Dp300 Firmware Version v500r002c00
Huawei ≫ Rp200 Firmware Version v500r002c00
Huawei ≫ Rp200 Firmware Version v600r006c00
Huawei ≫ Te30 Firmware Version v100r001c10
Huawei ≫ Te30 Firmware Version v500r002c00
Huawei ≫ Te30 Firmware Version v600r006c00
Huawei ≫ Te40 Firmware Version v500r002c00
Huawei ≫ Te40 Firmware Version v600r006c00
Huawei ≫ Te50 Firmware Version v500r002c00
Huawei ≫ Te50 Firmware Version v600r006c00
Huawei ≫ Te60 Firmware Version v100r001c10
Huawei ≫ Te60 Firmware Version v500r002c00
Huawei ≫ Te60 Firmware Version v600r006c00
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.19% | 0.09 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.5 | 1.8 | 3.6 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:P
|
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-vpp-en