Test ID:	1.3.6.1.4.1.25623.1.0.107822
Category:	Huawei
Title:	Huawei Data Communication: Out-Of-Bounds Read Vulnerability in Some Huawei Products (huawei-sa-20180131-01-sip)
Summary:	Some Huawei products have an out-of-bounds read vulnerability due to insufficient input validation.
Description:	Summary: Some Huawei products have an out-of-bounds read vulnerability due to insufficient input validation. Vulnerability Insight: Some Huawei products have an out-of-bounds read vulnerability due to insufficient input validation. An unauthenticated, remote attacker could exploit this vulnerability by sending malformed Session Initiation Protocol(SIP) packets to the target device. Successful exploit could make the device read out of bounds and thus cause a service to be unavailable. (Vulnerability ID: HWPSIRT-2017-11043)This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-17202.Huawei has released software updates to fix this vulnerability. This advisory is available in the linked references. Vulnerability Impact: Successful exploit could make the device read out of bounds and thus cause a server to be unavailable. Affected Software/OS: AR120-S versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR1200 versions V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR1200-S versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR150 versions V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR150-S versions V200R005C32 V200R007C00 V200R008C20 V200R008C30 AR160 versions V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR200 versions V200R005C32 V200R006C10 V200R007C00 V200R007C01 V200R008C20 V200R008C30 AR200-S versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR2200 versions V200R006C10 V200R007C00 V200R007C01 V200R007C02 V200R008C20 V200R008C30 AR2200-S versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 AR3200 versions V200R005C32 V200R006C10 V200R006C11 V200R007C00 V200R007C01 V200R007C02 V200R008C00 V200R008C10 V200R008C20 V200R008C30 AR3600 versions V200R006C10 V200R007C00 V200R007C01 V200R008C20 AR510 versions V200R005C32 V200R006C10 V200R007C00SPC600 V200R008C20 V200R008C30 NetEngine16EX versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 SRG1300 versions V200R005C32 V200R006C10 V200R007C00 V200R007C02 V200R008C20 V200R008C30 SRG2300 versions V200R005C32 V200R006C10 V200R007C00 V200R007C02 V200R008C20 V200R008C30 SRG3300 versions V200R005C32 V200R006C10 V200R007C00 V200R008C20 V200R008C30 Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-17202
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.