3.3

CVE-2017-17330

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Ar3200 Firmware Versionv200r005c32
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r006c10
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r006c11
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r007c00
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r007c01
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r007c02
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r008c00
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r008c10
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r008c20
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r008c30
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ngfw Module Firmware Versionv500r001c00
   Huawei ≫ Ngfw Module Version-
Huawei ≫ Ngfw Module Firmware Versionv500r001c20
   Huawei ≫ Ngfw Module Version-
Huawei ≫ Ngfw Module Firmware Versionv500r002c00
   Huawei ≫ Ngfw Module Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.041
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.3 1.8 1.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.