5.3

CVE-2017-17166

Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, TP3206 V100R002C00, VP9660 V500R002C00, V500R002C10 have a resource exhaustion vulnerability. The software does not process certain field of H.323 message properly, a remote unauthenticated attacker could send crafted H.323 message to the device, successful exploit could cause certain service unavailable since the stack memory is exhausted.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Dp300 Firmware Version v500r002c00
   Huawei ≫ Dp300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c00
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c20
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c50
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c00
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c20
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c50
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c00
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c20
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c50
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Tp3206 Firmware Version v100r002c00
   Huawei ≫ Tp3206 Version -
Huawei ≫ Vp9660 Firmware Version v500r002c00
   Huawei ≫ Vp9660 Version -
Huawei ≫ Vp9660 Firmware Version v500r002c10
   Huawei ≫ Vp9660 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.26% 0.666
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-02-h323-en
Vendor Advisory