Riskcovery

CVE-2017-17317

State
Published
Severity
Not scored
Published
Jul 2, 2018
Updated
Aug 5, 2024
Reserved
Dec 4, 2017

Read the record on cve.org

Description

Common Open Policy Service Protocol (COPS) module in Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6500 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6600 V100R001C00; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00 has a buffer overflow vulnerability. An unauthenticated, remote attacker has to control the peer device and send specially crafted message to the affected products. Due to insufficient input validation, successful exploit may cause some services abnormal.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
DP300; IPS Module; NGFW Module; RP200; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60Huawei Technologies Co., Ltd.
  • USG6300 V100R001C10Affected
  • V100R001C20Affected
  • V100R001C30Affected
  • V500R001C00Affected
  • V500R001C20Affected
  • V500R001C30Affected
  • V500R001C50Affected
  • Secospace USG6500 V100R001C10Affected
  • Secospace USG6600 V100R001C00Affected
  • TE30 V100R001C02Affected
  • V100R001C10Affected
  • V500R002C00Affected
  • V600R006C00Affected
  • TE40 V500R002C00Affected
  • TE50 V500R002C00Affected
  • TE60 V100R001C01Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.