7.8

CVE-2017-17165

IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S2700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5300 V200R003C00, V200R003C00SPC300T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R005C05, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S5700 V200R003C00, V200R003C00SPC316T, V200R003C00SPC600, V200R003C02, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00, V200R009C00, S600-E V200R008C00, V200R009C00, S6300 V200R003C00, V200R005C00, V200R007C00, V200R008C00, V200R009C00, S6700 V200R003C00, V200R005C00, V200R005C01, V200R005C02, V200R007C00, V200R008C00, V200R009C00 has an out-of-bounds read vulnerability. An unauthenticated attacker may send crafted malformed IPv6 packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause device to reset.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
HuaweiQuidway S2700 Firmware Versionv200r003c00spc300
   HuaweiQuidway S2700 Version-
HuaweiQuidway S5300 Firmware Versionv200r003c00spc300
   HuaweiQuidway S5300 Version-
HuaweiQuidway S5700 Firmware Versionv200r003c00spc300
   HuaweiQuidway S5700 Version-
HuaweiS2300 Firmware Versionv200r003c00
   HuaweiS2300 Version-
HuaweiS2300 Firmware Versionv200r003c00spc300t
   HuaweiS2300 Version-
HuaweiS2300 Firmware Versionv200r005c00
   HuaweiS2300 Version-
HuaweiS2300 Firmware Versionv200r006c00
   HuaweiS2300 Version-
HuaweiS2300 Firmware Versionv200r007c00
   HuaweiS2300 Version-
HuaweiS2300 Firmware Versionv200r008c00
   HuaweiS2300 Version-
HuaweiS2300 Firmware Versionv200r009c00
   HuaweiS2300 Version-
HuaweiS2700 Firmware Versionv200r005c00
   HuaweiS2700 Version-
HuaweiS2700 Firmware Versionv200r006c00
   HuaweiS2700 Version-
HuaweiS2700 Firmware Versionv200r007c00
   HuaweiS2700 Version-
HuaweiS2700 Firmware Versionv200r008c00
   HuaweiS2700 Version-
HuaweiS2700 Firmware Versionv200r009c00
   HuaweiS2700 Version-
HuaweiS5300 Firmware Versionv200r003c00
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r003c00spc300t
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r003c00spc600
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r003c02
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r005c00
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r005c01
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r005c02
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r005c03
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r005c05
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r006c00
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r007c00
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r008c00
   HuaweiS5300 Version-
HuaweiS5300 Firmware Versionv200r009c00
   HuaweiS5300 Version-
HuaweiS5700 Firmware Versionv200r003c00
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r003c00spc316t
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r003c00spc600
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r003c02
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r005c00
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r005c01
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r005c02
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r005c03
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r006c00
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r007c00
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r008c00
   HuaweiS5700 Version-
HuaweiS5700 Firmware Versionv200r009c00
   HuaweiS5700 Version-
HuaweiS600-e Firmware Versionv200r008c00
   HuaweiS600-e Version-
HuaweiS600-e Firmware Versionv200r009c00
   HuaweiS600-e Version-
HuaweiS6300 Firmware Versionv200r003c00
   HuaweiS6300 Version-
HuaweiS6300 Firmware Versionv200r005c00
   HuaweiS6300 Version-
HuaweiS6300 Firmware Versionv200r007c00
   HuaweiS6300 Version-
HuaweiS6300 Firmware Versionv200r008c00
   HuaweiS6300 Version-
HuaweiS6300 Firmware Versionv200r009c00
   HuaweiS6300 Version-
HuaweiS6700 Firmware Versionv200r003c00
   HuaweiS6700 Version-
HuaweiS6700 Firmware Versionv200r005c00
   HuaweiS6700 Version-
HuaweiS6700 Firmware Versionv200r005c01
   HuaweiS6700 Version-
HuaweiS6700 Firmware Versionv200r005c02
   HuaweiS6700 Version-
HuaweiS6700 Firmware Versionv200r007c00
   HuaweiS6700 Version-
HuaweiS6700 Firmware Versionv200r008c00
   HuaweiS6700 Version-
HuaweiS6700 Firmware Versionv200r009c00
   HuaweiS6700 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.394
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.