Details of VAR-201802-0300

ID

VAR-201802-0300

CVE

CVE-2017-17294

TITLE

plural Huawei In product NULL Pointer dereference vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2017-012508

DESCRIPTION

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10 have a null pointer dereference vulnerability. Due to insufficient input validation, an authenticated, local attacker may craft a specific XML file to the affected products to cause null pointer dereference. Successful exploit will cause some service abnormal. plural Huawei The product includes NULL A vulnerability related to pointer dereference exists.Service operation interruption (DoS) There is a possibility of being put into a state. Huawei AR and SRG series enterprise routers are Huawei's all-in-one routers for small and medium-sized offices or small and medium-sized enterprises. TE series, DP300 and MAXPRESENCE are Huawei's integrated desktop telepresence products and high-definition video for high-end customers. Conference terminal products. A number of Huawei products have a null pointer reference vulnerability because the device failed to adequately verify user input. Huawei AR120-S and others are all router products of China Huawei (Huawei). There are security vulnerabilities in several Huawei products. The vulnerability is caused by insufficient verification input in the program. The following products and versions are affected: Huawei AR120-S V200R006C10 Version, V200R007C00 Version, V200R008C20 Version, V200R008C30 Version; AR1200 V200R006C10 Version, V200R006C13 Version, V200R007C00 Version, V200R007C01 Version, V200R007C02 Version, V200R008C20 Version, V200R008C30 Version; AR1200-S V200R006C10 Version , V200R007C00 version, V200R008C20 version, V200R008C30 version; AR150, etc

Trust: 2.25

sources: NVD: CVE-2017-17294 // JVNDB: JVNDB-2017-012508 // CNVD: CNVD-2017-37506 // VULHUB: VHN-108302

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2017-37506

AFFECTED PRODUCTS

vendor:	huawei	model:	te40	scope:	eq	version:	v600r006c00	Trust: 1.6
vendor:	huawei	model:	te50	scope:	eq	version:	v500r002c00	Trust: 1.6
vendor:	huawei	model:	te60	scope:	eq	version:	v100r001c10	Trust: 1.6
vendor:	huawei	model:	tp3106	scope:	eq	version:	v100r002c00	Trust: 1.6
vendor:	huawei	model:	tp3206	scope:	eq	version:	v100r002c10	Trust: 1.6
vendor:	huawei	model:	te60	scope:	eq	version:	v100r001c01	Trust: 1.6
vendor:	huawei	model:	te60	scope:	eq	version:	v500r002c00	Trust: 1.6
vendor:	huawei	model:	te50	scope:	eq	version:	v600r006c00	Trust: 1.6
vendor:	huawei	model:	te60	scope:	eq	version:	v600r006c00	Trust: 1.6
vendor:	huawei	model:	tp3206	scope:	eq	version:	v100r002c00	Trust: 1.6
vendor:	huawei	model:	ar150-s	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar200	scope:	eq	version:	v200r007c01	Trust: 1.0
vendor:	huawei	model:	srg2300	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	te30	scope:	eq	version:	v500r002c00	Trust: 1.0
vendor:	huawei	model:	max presence	scope:	eq	version:	v100r001c00	Trust: 1.0
vendor:	huawei	model:	srg3300	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar510	scope:	eq	version:	v200r006c12	Trust: 1.0
vendor:	huawei	model:	srg3300	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar120-s	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar120-s	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar2200	scope:	eq	version:	v200r006c16	Trust: 1.0
vendor:	huawei	model:	ar3600	scope:	eq	version:	v200r007c01	Trust: 1.0
vendor:	huawei	model:	ar3200	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar2200	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar3200	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar3200	scope:	eq	version:	v200r006c11	Trust: 1.0
vendor:	huawei	model:	ar2200	scope:	eq	version:	v200r007c01	Trust: 1.0
vendor:	huawei	model:	ar1200	scope:	eq	version:	v200r006c13	Trust: 1.0
vendor:	huawei	model:	ar3200	scope:	eq	version:	v200r008c00	Trust: 1.0
vendor:	huawei	model:	ar200-s	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar200-s	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar150	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar160	scope:	eq	version:	v200r007c02	Trust: 1.0
vendor:	huawei	model:	rp200	scope:	eq	version:	v500r002c00	Trust: 1.0
vendor:	huawei	model:	ar150	scope:	eq	version:	v200r007c01	Trust: 1.0
vendor:	huawei	model:	ar510	scope:	eq	version:	v200r006c17	Trust: 1.0
vendor:	huawei	model:	ar3200	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	te30	scope:	eq	version:	v100r001c10	Trust: 1.0
vendor:	huawei	model:	rp200	scope:	eq	version:	v600r006c00	Trust: 1.0
vendor:	huawei	model:	ar2200	scope:	eq	version:	v200r007c02	Trust: 1.0
vendor:	huawei	model:	ar3200	scope:	eq	version:	v200r008c10	Trust: 1.0
vendor:	huawei	model:	ar510	scope:	eq	version:	v200r006c16	Trust: 1.0
vendor:	huawei	model:	netengine16ex	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar1200	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	netengine16ex	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	srg1300	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar1200	scope:	eq	version:	v200r007c01	Trust: 1.0
vendor:	huawei	model:	ar150	scope:	eq	version:	v200r007c02	Trust: 1.0
vendor:	huawei	model:	ar510	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	te30	scope:	eq	version:	v100r001c02	Trust: 1.0
vendor:	huawei	model:	ar1200	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar150-s	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar510	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar2200	scope:	eq	version:	v200r006c13	Trust: 1.0
vendor:	huawei	model:	srg2300	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar1200-s	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar160	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar200	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar200	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar2200-s	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar1200-s	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar2200-s	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar160	scope:	eq	version:	v200r007c01	Trust: 1.0
vendor:	huawei	model:	srg1300	scope:	eq	version:	v200r007c02	Trust: 1.0
vendor:	huawei	model:	ar1200	scope:	eq	version:	v200r007c02	Trust: 1.0
vendor:	huawei	model:	ar120-s	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar3600	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar160	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar200	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar3600	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	te30	scope:	eq	version:	v600r006c00	Trust: 1.0
vendor:	huawei	model:	ar2200	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar2200	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	srg3300	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	srg2300	scope:	eq	version:	v200r007c02	Trust: 1.0
vendor:	huawei	model:	srg3300	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar150	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar150	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar3200	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar120-s	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar160	scope:	eq	version:	v200r006c12	Trust: 1.0
vendor:	huawei	model:	ar3200	scope:	eq	version:	v200r007c01	Trust: 1.0
vendor:	huawei	model:	ar3600	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar510	scope:	eq	version:	v200r006c13	Trust: 1.0
vendor:	huawei	model:	ar2200	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar200-s	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	dp300	scope:	eq	version:	v500r002c00	Trust: 1.0
vendor:	huawei	model:	ar200-s	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar150	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar200	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	srg1300	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar1200	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar1200	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	srg1300	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar510	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar3200	scope:	eq	version:	v200r007c02	Trust: 1.0
vendor:	huawei	model:	ar510	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	te40	scope:	eq	version:	v500r002c00	Trust: 1.0
vendor:	huawei	model:	ar150-s	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar150-s	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	netengine16ex	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	srg2300	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	srg2300	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar1200-s	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar1200-s	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	ar2200-s	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar2200-s	scope:	eq	version:	v200r006c10	Trust: 1.0
vendor:	huawei	model:	netengine16ex	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	srg1300	scope:	eq	version:	v200r007c00	Trust: 1.0
vendor:	huawei	model:	ar510	scope:	eq	version:	v200r006c15	Trust: 1.0
vendor:	huawei	model:	ar160	scope:	eq	version:	v200r008c20	Trust: 1.0
vendor:	huawei	model:	ar160	scope:	eq	version:	v200r008c30	Trust: 1.0
vendor:	huawei	model:	ar120-s	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	dp300	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	max presence	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	netengine16ex	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	rp200	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	srg1300	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	te30	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	tp3106	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	ar3200 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3200 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3200 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	dp300 v500r002c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te60 v100r001c01	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te60 v100r001c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te60 v500r002c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te60 v600r006c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	tp3106 v100r002c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	max presence v100r001c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	tp3206 v100r002c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	rp200 v500r002c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	rp200 v600r006c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te30 v100r001c02	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te30 v100r001c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te30 v500r002c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te30 v600r006c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te40 v500r002c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te40 v600r006c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te50 v500r002c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	te50 v600r006c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar120-s v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar120-s v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar120-s v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar120-s v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200 v200r006c13	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200 v200r007c01	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200 v200r007c02	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200-s v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200-s v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200-s v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar1200-s v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150 v200r007c01	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150 v200r007c02	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150-s v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150-s v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150-s v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar150-s v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar160 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar160 v200r006c12	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar160 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar160 v200r007c01	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar160 v200r007c02	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar160 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar160 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar200 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar200 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar200 v200r007c01	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar200 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar200 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar200-s v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar200-s v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar200-s v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar200-s v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200 v200r006c13	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200 v200r007c01	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200 v200r007c02	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3200 v200r006c11	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3200 v200r007c01	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3200 v200r007c02	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3200 v200r008c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3200 v200r008c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3200 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510 v200r006c12	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510 v200r006c13	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510 v200r006c15	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510 v200r006c16	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510 v200r006c17	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	netengine16ex v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	netengine16ex v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	netengine16ex v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	netengine16ex v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg1300 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg1300 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg1300 v200r007c01	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg1300 v200r007c02	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg1300 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg1300 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg2300 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg2300 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg2300 v200r007c02	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg2300 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg2300 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg3300 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg3300 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg3300 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	srg3300 v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar510	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200-s v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200-s v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200-s v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200-s v200r008c30	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar2200 v200r006c16	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3600 v200r006c10	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3600 v200r007c01	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3600 v200r008c20	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	ar3600 v200r007c00	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	tp3206 v100r002c10	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2017-37506 // JVNDB: JVNDB-2017-012508 // CNNVD: CNNVD-201712-679 // NVD: CVE-2017-17294

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-17294
value:	LOW
Trust: 1.0
NVD:	CVE-2017-17294
value:	LOW
Trust: 0.8
CNVD:	CNVD-2017-37506
value:	LOW
Trust: 0.6
CNNVD:	CNNVD-201712-679
value:	LOW
Trust: 0.6
VULHUB:	VHN-108302
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2017-17294
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2017-37506
severity:	LOW
baseScore:	1.7
vectorString:	AV:L/AC:L/AU:S/C:P/I:N/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.1
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-108302
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-17294
baseSeverity:	LOW
baseScore:	3.3
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	1.8
impactScore:	1.4
version:	3.0
Trust: 1.8

sources: CNVD: CNVD-2017-37506 // VULHUB: VHN-108302 // JVNDB: JVNDB-2017-012508 // CNNVD: CNNVD-201712-679 // NVD: CVE-2017-17294

PROBLEMTYPE DATA

problemtype:

CWE-476

Trust: 1.9

sources: VULHUB: VHN-108302 // JVNDB: JVNDB-2017-012508 // NVD: CVE-2017-17294

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201712-679

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201712-679

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-012508

PATCH

title:	huawei-sa-20171213-06-xml	url:	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en	Trust: 0.8
title:	Patches for multiple Huawei product null pointer reference vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/110997	Trust: 0.6
title:	Multiple Huawei Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=77218	Trust: 0.6

sources: CNVD: CNVD-2017-37506 // JVNDB: JVNDB-2017-012508 // CNNVD: CNNVD-201712-679

EXTERNAL IDS

db:	NVD	id:	CVE-2017-17294	Trust: 3.1
db:	JVNDB	id:	JVNDB-2017-012508	Trust: 0.8
db:	CNNVD	id:	CNNVD-201712-679	Trust: 0.7
db:	CNVD	id:	CNVD-2017-37506	Trust: 0.6
db:	VULHUB	id:	VHN-108302	Trust: 0.1

sources: CNVD: CNVD-2017-37506 // VULHUB: VHN-108302 // JVNDB: JVNDB-2017-012508 // CNNVD: CNNVD-201712-679 // NVD: CVE-2017-17294

REFERENCES

url:	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en	Trust: 1.7
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-17294	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-17294	Trust: 0.8
url:	http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171213-06-xml-cn	Trust: 0.6

sources: CNVD: CNVD-2017-37506 // VULHUB: VHN-108302 // JVNDB: JVNDB-2017-012508 // CNNVD: CNNVD-201712-679 // NVD: CVE-2017-17294

CREDITS

Huawei internal tester

Trust: 0.6

sources: CNNVD: CNNVD-201712-679

SOURCES

db:	CNVD	id:	CNVD-2017-37506
db:	VULHUB	id:	VHN-108302
db:	JVNDB	id:	JVNDB-2017-012508
db:	CNNVD	id:	CNNVD-201712-679
db:	NVD	id:	CVE-2017-17294

LAST UPDATE DATE

2024-11-23T23:05:14.856000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2017-37506	date:	2017-12-19T00:00:00
db:	VULHUB	id:	VHN-108302	date:	2018-03-01T00:00:00
db:	JVNDB	id:	JVNDB-2017-012508	date:	2018-03-16T00:00:00
db:	CNNVD	id:	CNNVD-201712-679	date:	2017-12-20T00:00:00
db:	NVD	id:	CVE-2017-17294	date:	2024-11-21T03:17:46.290

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2017-37506	date:	2017-12-19T00:00:00
db:	VULHUB	id:	VHN-108302	date:	2018-02-15T00:00:00
db:	JVNDB	id:	JVNDB-2017-012508	date:	2018-03-16T00:00:00
db:	CNNVD	id:	CNNVD-201712-679	date:	2017-12-20T00:00:00
db:	NVD	id:	CVE-2017-17294	date:	2018-02-15T16:29:03.250