CVE-2017-17298

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, ViewPoint 9030 V100R011C02, V100R011C03 have a buffer overflow vulnerability. An unauthenticated, remote attacker may send specially crafted certificates to the affected products. Due to insufficient validation of the certificates, successful exploit may cause buffer overflow and some service abnormal.

• CWE-119

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-overflow-enVendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-overflow-enVendor Advisory

Published

Feb 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17292Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R0…
• CVE-2017-17293Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R0…
• CVE-2017-17294Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R0…
• CVE-2017-17295Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R0…
• CVE-2017-17296Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R0…
• CVE-2017-17297Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R0…
• CVE-2017-17299Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10,…
• CVE-2017-17300Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V…
• CVE-2017-17301Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R0…
• CVE-2017-17302Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C1…
• CVE-2017-17303Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; …
• CVE-2017-17304The CIDAM Protocol on some Huawei Products has multiple inpu…