Strix
26.1K

CVE-2017-15317

UnknownEPSS 1.31%

Last modified

CVE-2017-15317 is a vulnerability of currently unknown severity. AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.. EPSS estimates a 1.31% chance of exploitation in the next 30 days.

Description

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.

Metrics

EPSS Probability
1.31%

67.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HuaweiAr120-S Firmwarev200r006c10
HuaweiAr120-S Firmwarev200r007c00
HuaweiAr120-S Firmwarev200r008c20
HuaweiAr120-S Firmwarev200r008c30
HuaweiAr1200 Firmwarev200r006c10
HuaweiAr1200 Firmwarev200r006c13
HuaweiAr1200 Firmwarev200r007c00
HuaweiAr1200 Firmwarev200r007c01
HuaweiAr1200 Firmwarev200r007c02
HuaweiAr1200 Firmwarev200r008c20
HuaweiAr1200 Firmwarev200r008c30
HuaweiAr1200-S Firmwarev200r006c10
HuaweiAr1200-S Firmwarev200r007c00
HuaweiAr1200-S Firmwarev200r008c20
HuaweiAr1200-S Firmwarev200r008c30
HuaweiAr150 Firmwarev200r006c10
HuaweiAr150 Firmwarev200r007c00
HuaweiAr150 Firmwarev200r007c01
HuaweiAr150 Firmwarev200r007c02
HuaweiAr150 Firmwarev200r008c20
HuaweiAr150 Firmwarev200r008c30
HuaweiAr150-S Firmwarev200r006c10
HuaweiAr150-S Firmwarev200r007c00
HuaweiAr150-S Firmwarev200r008c20
HuaweiAr150-S Firmwarev200r008c30
HuaweiAr160 Firmwarev200r006c10
HuaweiAr160 Firmwarev200r006c12
HuaweiAr160 Firmwarev200r007c00
HuaweiAr160 Firmwarev200r007c01
HuaweiAr160 Firmwarev200r007c02
HuaweiAr160 Firmwarev200r008c20
HuaweiAr160 Firmwarev200r008c30
HuaweiAr200 Firmwarev200r006c10
HuaweiAr200 Firmwarev200r007c00
HuaweiAr200 Firmwarev200r007c01
HuaweiAr200 Firmwarev200r008c20
HuaweiAr200 Firmwarev200r008c30
HuaweiAr200-S Firmwarev200r006c10
HuaweiAr200-S Firmwarev200r007c00
HuaweiAr200-S Firmwarev200r008c20
HuaweiAr200-S Firmwarev200r008c30
HuaweiAr2200 Firmwarev200r006c10
HuaweiAr2200 Firmwarev200r006c13
HuaweiAr2200 Firmwarev200r006c16
HuaweiAr2200 Firmwarev200r007c00
HuaweiAr2200 Firmwarev200r007c01
HuaweiAr2200 Firmwarev200r007c02
HuaweiAr2200 Firmwarev200r008c20
HuaweiAr2200 Firmwarev200r008c30
HuaweiAr2200-S Firmwarev200r006c10

Showing 50 of 85 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2017-15317?
AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.
How severe is CVE-2017-15317?
Severity scoring for CVE-2017-15317 is pending analysis. The EPSS model estimates a 1.31% probability of exploitation in the next 30 days.
How do I fix CVE-2017-15317?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-15317?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST