6.5

CVE-2017-8200

MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Max Presence Firmware Versionv100r001c00
   Huawei ≫ Max Presence Version-
Huawei ≫ Tp3106 Firmware Versionv100r002c00
   Huawei ≫ Tp3106 Version-
Huawei ≫ Tp3206 Firmware Versionv100r002c00
   Huawei ≫ Tp3206 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.432
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://www.securityfocus.com/bid/101948
Third Party Advisory
VDB Entry