CVE-2017-15356

N/A

Descricao

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially crafted HTTP messages to the affected products. Due insufficient input validation of three different parameters in the messages, successful exploit may cause some service abnormal.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/15/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

huawei:dp300huawei:dp300_firmwarehuawei:rp200huawei:rp200_firmwarehuawei:te30huawei:te30_firmwarehuawei:te40huawei:te40_firmwarehuawei:te50huawei:te50_firmwarehuawei:te60huawei:te60_firmwarehuawei:tx50huawei:tx50_firmware

Fraquezas (CWE)

CWE-119

Referencias

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-02-http-en(psirt@huawei.com)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-02-http-en(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.