CVE-2017-2690
Last modified
CVE-2017-2690 is a vulnerability of currently unknown severity. SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C20, V200R003C30,eSpace U1981 with software V200R003C20 and V200R003C30 have an denial of service (DoS) vulnerability, which allow an attacker with specific permission to craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C20, V200R003C30,eSpace U1981 with software V200R003C20 and V200R003C30 have an denial of service (DoS) vulnerability, which allow an attacker with specific permission to craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Softco Firmware | v200r003c20 |
| Huawei | Espace U1910 Firmware | v200r003c00 |
| Huawei | Espace U1910 Firmware | v200r003c20 |
| Huawei | Espace U1910 Firmware | v200r003c30 |
| Huawei | Espace U1911 Firmware | v200r003c20 |
| Huawei | Espace U1911 Firmware | v200r003c30 |
| Huawei | Espace U1930 Firmware | v200r003c20 |
| Huawei | Espace U1930 Firmware | v200r003c30 |
| Huawei | Espace U1960 Firmware | v200r003c20 |
| Huawei | Espace U1960 Firmware | v200r003c30 |
| Huawei | Espace U1980 Firmware | v200r003c20 |
| Huawei | Espace U1980 Firmware | v200r003c30 |
| Huawei | Espace U1981 Firmware | v200r003c20 |
| Huawei | Espace U1981 Firmware | v200r003c30 |
References
- http://www.securityfocus.com/bid/95382Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/95382Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-2690?
How severe is CVE-2017-2690?
How do I fix CVE-2017-2690?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-2684Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow…
- CVE-2017-2685Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00…
- CVE-2017-2686Siemens RUGGEDCOM ROX I (all versions) contain a vulnerabili…
- CVE-2017-2687Siemens RUGGEDCOM ROX I (all versions) contain a vulnerabili…
- CVE-2017-2688The integrated web server in Siemens RUGGEDCOM ROX I (all ve…
- CVE-2017-2689Siemens RUGGEDCOM ROX I (all versions) allow an authenticate…
- CVE-2017-2691Huawei P9 versions earlier before EVA-AL10C00B373, versions …
- CVE-2017-2692The Keyguard application in ALE-L02C635B140 and earlier vers…
- CVE-2017-2693ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and ear…
- CVE-2017-2694The AlarmService component in HwVmall with software earlier …
- CVE-2017-2695TIT-AL00C583B211 has a directory traversal vulnerability whi…
- CVE-2017-2696The emerg_data driver in CAM-L21C10B130 and earlier versions…
Are you affected by CVE-2017-2690?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
