CVE-2017-17281

N/A

Descripcion

SFTP module in Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds read vulnerability. A remote, authenticated attacker could exploit this vulnerability by sending specially crafted messages to a target device. Successful exploit may cause some information leak.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado3/9/2018

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

huawei:dp300huawei:dp300_firmwarehuawei:rp200huawei:rp200_firmwarehuawei:te30huawei:te30_firmwarehuawei:te40huawei:te40_firmwarehuawei:te50huawei:te50_firmwarehuawei:te60huawei:te60_firmware

Debilidades (CWE)

CWE-125

Referencias

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sftp-en(psirt@huawei.com)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sftp-en(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.