Vulnerability Details : CVE-2017-17286
Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R005C32, V200R007C00, V200R008C20, V200R008C30, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, NetEngine16EX V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an out-of-bound write vulnerability. Due to insufficient input validation, a remote, unauthenticated attacker may craft encryption key to the affected products. Successful exploit may cause buffer overflow, services abnormal.
Vulnerability category: OverflowMemory Corruption
Products affected by CVE-2017-17286
- cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar120-s_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar150-s_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar160_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar200-s_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar2200-s_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar510_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:netengine16ex_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg1300_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg2300_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:srg3300_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-17286
0.18%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 56 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-17286
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST | |
|
5.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
3.9
|
1.4
|
NIST |
CWE ids for CVE-2017-17286
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-17286
-
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-encryption-en
Security Advisory - Two Buffer Overflow Vulnerabilities in Some Huawei ProductsVendor Advisory
Jump to