Skip to content
OpenAdvisories
Unscored CVE-2017-17150 EUVD-2017-8316GHSA-6j33-j6f3-f667

Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; …

Published Mar 9, 2018 · Updated Aug 5, 2024 · Assigned by huawei

Vendor: Huawei Product: DP300,RP200,TE30,TE40,TE50,TE60 Category: Network devices

Description

Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an DoS vulnerability due to insufficient validation of the parameter. An authenticated local attacker may call a special API with special parameter, which cause an infinite loop. Successful exploit of this vulnerability can allow an attacker to launch DOS attack.

Affected products

VendorProductAffectedFixed
Huawei Technologies DP300; RP200; TE30; TE40; TE50; TE60 DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, TE40 V500R002C00, TE50 V500R002C00, TE60 V100R001C10 —

References