CVE Feed

    Dashboard / CVE / CVE-2017-8199

    CVE-2017-8199

    MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.

    Published:Nov 22, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 22, 2017
    EPSS Score:0.00233
    CVSS Score:6.5

    Affected Products

    Vendor
    Huawei
    Product
    Max Presence
    Vendor
    Huawei
    Product
    Max Presence Firmware
    Vendor
    Huawei
    Product
    Tp3106
    Vendor
    Huawei
    Product
    Tp3106 Firmware
    Vendor
    Huawei
    Product
    Tp3206
    Vendor
    Huawei
    Product
    Tp3206 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2017-17291 (CVSS 5.5) — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C0…
    CVE-2017-17292 (CVSS 3.3) — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C0…
    CVE-2017-17293 (CVSS 3.3) — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C0…
    CVE-2017-17294 (CVSS 3.3) — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C0…
    CVE-2017-15331 (CVSS 5.3) — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C0…
    CVE-2017-15332 (CVSS 5.3) — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C0…
    CVE-2017-8200 (CVSS 6.5) — MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H…
    CVE-2017-8201 (CVSS 6.5) — MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 p…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High