CVE Feed

    Dashboard / CVE / CVE-2017-17330

    CVE-2017-17330

    Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.

    Published:Mar 9, 2018
    Last Modified:Nov 21, 2024
    EPS:Mar 9, 2018
    EPSS Score:0.00026
    CVSS Score:3.3

    Affected Products

    Vendor
    Huawei
    Product
    Ar3200
    Vendor
    Huawei
    Product
    Ar3200 Firmware
    Vendor
    Huawei
    Product
    Ngfw Module
    Vendor
    Huawei
    Product
    Ngfw Module Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-469 HTTP DoS

    Related CVEs

    CVE-2019-19415 (CVSS 7.5) — The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could e…
    CVE-2019-19416 (CVSS 7.5) — The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could e…
    CVE-2019-19417 (CVSS 7.5) — The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could e…
    CVE-2020-9071 (CVSS 6.5) — There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past th…
    CVE-2020-9068 (CVSS 9.8) — Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SP…
    CVE-2019-5304 (CVSS 7.5) — Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specifi…
    CVE-2019-5259 (CVSS 6.5) — There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR…
    CVE-2019-5291 (CVSS 5.9) — Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthent…
    CVE-2019-5293 (CVSS 6.5) — Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with oper…
    CVE-2019-5294 (CVSS 7.5) — There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may se…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High