Sign-up

ID

VAR-201802-0548


CVE

CVE-2017-15335


TITLE

plural Huawei Product buffer error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2017-012481

DESCRIPTION

The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20, V200R003C30 has a buffer overflow vulnerability. An attacker may send specially crafted messages to the affected products. Due to the insufficient validation of some values for SIP messages, successful exploit may cause services abnormal. plural Huawei The product contains a buffer error vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Huawei DP300 and other products are all products of China Huawei. HuaweiDP300 is a video conferencing terminal device. IPSModule is an intrusion prevention module. SIPbackup is one of the SIP backup modules. The following products and versions are affected: Huawei DP300 Version; IPS Module V100R001C10 Version, V100R001C20 Version, V100R001C30 Version, V500R001C00 Version, V500R001C20 Version, V500R001C30 Version, V500R001C50 Version; NGFW Module V100R001C10 Version, V100R001C20 Version, V100R001C30 Version, V500R001C00 Version, V500R001C20 Version, V500R002C00 Version, V500R002C10 Version; NIP6300 V500R001C00 Version, V500R001C20 Version, V500R001C30 Version, V500R001C50 Version; NIP6600 V500R001C00 Version, V500R001C20 Version, V500R001C30 Version, V500R001C50 Version; NIP6800 V500R001C50 Version; RP200 V500R002C00 Version, V600R006C00 Version; SVN5600 wait

Trust: 2.25

sources: NVD: CVE-2017-15335 // JVNDB: JVNDB-2017-012481 // CNVD: CNVD-2017-37972 // VULHUB: VHN-106147

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2017-37972

AFFECTED PRODUCTS

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c03

Trust: 1.6

vendor:huaweimodel:vp9660scope:eqversion:v500r002c10

Trust: 1.6

vendor:huaweimodel:viewpoint 9030scope:eqversion:v100r011c02

Trust: 1.6

vendor:huaweimodel:espace u1981scope:eqversion:v100r001c20

Trust: 1.6

vendor:huaweimodel:espace u1981scope:eqversion:v200r003c00

Trust: 1.6

vendor:huaweimodel:viewpoint 8660scope:eqversion:v100r008c03

Trust: 1.6

vendor:huaweimodel:espace u1981scope:eqversion:v200r003c20

Trust: 1.6

vendor:huaweimodel:vp9660scope:eqversion:v500r002c00

Trust: 1.6

vendor:huaweimodel:espace u1981scope:eqversion:v200r003c30

Trust: 1.6

vendor:huaweimodel:vp9660scope:eqversion:v200r001c30

Trust: 1.6

vendor:huaweimodel:te30scope:eqversion:v500r002c00

Trust: 1.0

vendor:huaweimodel:secospace usg6600scope:eqversion:v500r001c30

Trust: 1.0

vendor:huaweimodel:nip6300scope:eqversion:v500r001c50

Trust: 1.0

vendor:huaweimodel:nip6300scope:eqversion:v500r001c20

Trust: 1.0

vendor:huaweimodel:usg9520scope:eqversion:v300r001c01

Trust: 1.0

vendor:huaweimodel:svn5800scope:eqversion:v200r003c00

Trust: 1.0

vendor:huaweimodel:secospace usg6300scope:eqversion:v100r001c20

Trust: 1.0

vendor:huaweimodel:usg9500scope:eqversion:v500r001c20

Trust: 1.0

vendor:huaweimodel:ngfw modulescope:eqversion:v100r001c30

Trust: 1.0

vendor:huaweimodel:rp200scope:eqversion:v500r002c00

Trust: 1.0

vendor:huaweimodel:secospace usg6500scope:eqversion:v500r001c50

Trust: 1.0

vendor:huaweimodel:ngfw modulescope:eqversion:v500r002c10

Trust: 1.0

vendor:huaweimodel:secospace usg6500scope:eqversion:v100r001c20

Trust: 1.0

vendor:huaweimodel:ips modulescope:eqversion:v100r001c10

Trust: 1.0

vendor:huaweimodel:nip6600scope:eqversion:v500r001c50

Trust: 1.0

vendor:huaweimodel:nip6300scope:eqversion:v500r001c00

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c10

Trust: 1.0

vendor:huaweimodel:nip6600scope:eqversion:v500r001c20

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v500r002c00

Trust: 1.0

vendor:huaweimodel:ips modulescope:eqversion:v100r001c30

Trust: 1.0

vendor:huaweimodel:usg9580scope:eqversion:v300r001c20

Trust: 1.0

vendor:huaweimodel:secospace usg6600scope:eqversion:v500r001c50

Trust: 1.0

vendor:huaweimodel:secospace usg6300scope:eqversion:v500r001c30

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v600r006c00

Trust: 1.0

vendor:huaweimodel:secospace usg6600scope:eqversion:v500r001c20

Trust: 1.0

vendor:huaweimodel:secospace usg6600scope:eqversion:v100r001c20

Trust: 1.0

vendor:huaweimodel:ngfw modulescope:eqversion:v500r002c00

Trust: 1.0

vendor:huaweimodel:nip6600scope:eqversion:v500r001c00

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v100r001c02

Trust: 1.0

vendor:huaweimodel:secospace usg6300scope:eqversion:v100r001c10

Trust: 1.0

vendor:huaweimodel:secospace usg6300scope:eqversion:v100r001c30

Trust: 1.0

vendor:huaweimodel:ips modulescope:eqversion:v500r001c50

Trust: 1.0

vendor:huaweimodel:secospace usg6500scope:eqversion:v100r001c10

Trust: 1.0

vendor:huaweimodel:secospace usg6600scope:eqversion:v100r001c00

Trust: 1.0

vendor:huaweimodel:svn5600scope:eqversion:v200r003c10

Trust: 1.0

vendor:huaweimodel:te50scope:eqversion:v500r002c00

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c10

Trust: 1.0

vendor:huaweimodel:secospace usg6600scope:eqversion:v500r001c00

Trust: 1.0

vendor:huaweimodel:ips modulescope:eqversion:v500r001c20

Trust: 1.0

vendor:huaweimodel:vp9660scope:eqversion:v200r001c02

Trust: 1.0

vendor:huaweimodel:secospace usg6500scope:eqversion:v100r001c30

Trust: 1.0

vendor:huaweimodel:te50scope:eqversion:v600r006c00

Trust: 1.0

vendor:huaweimodel:te30scope:eqversion:v600r006c00

Trust: 1.0

vendor:huaweimodel:ngfw modulescope:eqversion:v100r001c10

Trust: 1.0

vendor:huaweimodel:ips modulescope:eqversion:v500r001c00

Trust: 1.0

vendor:huaweimodel:ips modulescope:eqversion:v500r001c30

Trust: 1.0

vendor:huaweimodel:svn5600scope:eqversion:v200r003c00

Trust: 1.0

vendor:huaweimodel:secospace usg6300scope:eqversion:v500r001c50

Trust: 1.0

vendor:huaweimodel:nip6800scope:eqversion:v500r001c50

Trust: 1.0

vendor:huaweimodel:secospace usg6300scope:eqversion:v500r001c20

Trust: 1.0

vendor:huaweimodel:secospace usg6600scope:eqversion:v100r001c30

Trust: 1.0

vendor:huaweimodel:svn5800-cscope:eqversion:v200r003c10

Trust: 1.0

vendor:huaweimodel:usg9560scope:eqversion:v300r001c20

Trust: 1.0

vendor:huaweimodel:dp300scope:eqversion:v500r002c00

Trust: 1.0

vendor:huaweimodel:secospace usg6500scope:eqversion:v500r001c20

Trust: 1.0

vendor:huaweimodel:nip6300scope:eqversion:v500r001c30

Trust: 1.0

vendor:huaweimodel:rp200scope:eqversion:v600r006c0

Trust: 1.0

vendor:huaweimodel:secospace usg6300scope:eqversion:v500r001c00

Trust: 1.0

vendor:huaweimodel:usg9500scope:eqversion:v500r001c00

Trust: 1.0

vendor:huaweimodel:usg9500scope:eqversion:v500r001c30

Trust: 1.0

vendor:huaweimodel:semg9811scope:eqversion:v300r001c01

Trust: 1.0

vendor:huaweimodel:svn5800-cscope:eqversion:v200r003c00

Trust: 1.0

vendor:huaweimodel:te60scope:eqversion:v100r001c01

Trust: 1.0

vendor:huaweimodel:ngfw modulescope:eqversion:v100r001c20

Trust: 1.0

vendor:huaweimodel:ngfw modulescope:eqversion:v500r001c20

Trust: 1.0

vendor:huaweimodel:secospace usg6500scope:eqversion:v500r001c00

Trust: 1.0

vendor:huaweimodel:te40scope:eqversion:v500r002c00

Trust: 1.0

vendor:huaweimodel:usg9560scope:eqversion:v300r001c01

Trust: 1.0

vendor:huaweimodel:secospace usg6500scope:eqversion:v500r001c30

Trust: 1.0

vendor:huaweimodel:nip6600scope:eqversion:v500r001c30

Trust: 1.0

vendor:huaweimodel:te40scope:eqversion:v600r006c00

Trust: 1.0

vendor:huaweimodel:usg9580scope:eqversion:v300r001c01

Trust: 1.0

vendor:huaweimodel:ips modulescope:eqversion:v100r001c20

Trust: 1.0

vendor:huaweimodel:svn5800scope:eqversion:v200r003c10

Trust: 1.0

vendor:huaweimodel:usg9520scope:eqversion:v300r001c20

Trust: 1.0

vendor:huaweimodel:ngfw modulescope:eqversion:v500r001c00

Trust: 1.0

vendor:huaweimodel:dp300scope: - version: -

Trust: 0.8

vendor:huaweimodel:espace u1981scope: - version: -

Trust: 0.8

vendor:huaweimodel:ips modulescope: - version: -

Trust: 0.8

vendor:huaweimodel:ngfw modulescope: - version: -

Trust: 0.8

vendor:huaweimodel:nip6300scope: - version: -

Trust: 0.8

vendor:huaweimodel:nip6600scope: - version: -

Trust: 0.8

vendor:huaweimodel:nip6800scope: - version: -

Trust: 0.8

vendor:huaweimodel:rp200scope: - version: -

Trust: 0.8

vendor:huaweimodel:secospace usg6300scope: - version: -

Trust: 0.8

vendor:huaweimodel:secospace usg6500scope: - version: -

Trust: 0.8

vendor:huaweimodel:secospace usg6600scope: - version: -

Trust: 0.8

vendor:huaweimodel:semg9811scope: - version: -

Trust: 0.8

vendor:huaweimodel:svn5600scope: - version: -

Trust: 0.8

vendor:huaweimodel:svn5800scope: - version: -

Trust: 0.8

vendor:huaweimodel:svn5800-cscope: - version: -

Trust: 0.8

vendor:huaweimodel:te30scope: - version: -

Trust: 0.8

vendor:huaweimodel:te40scope: - version: -

Trust: 0.8

vendor:huaweimodel:te50scope: - version: -

Trust: 0.8

vendor:huaweimodel:te60scope: - version: -

Trust: 0.8

vendor:huaweimodel:usg9500scope: - version: -

Trust: 0.8

vendor:huaweimodel:usg9520scope: - version: -

Trust: 0.8

vendor:huaweimodel:usg9560scope: - version: -

Trust: 0.8

vendor:huaweimodel:usg9580scope: - version: -

Trust: 0.8

vendor:huaweimodel:viewpoint 8660scope: - version: -

Trust: 0.8

vendor:huaweimodel:viewpoint 9030scope: - version: -

Trust: 0.8

vendor:huaweimodel:vp9660scope: - version: -

Trust: 0.8

vendor:huaweimodel:viewpoint v100r011c03scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:viewpoint v100r011c02scope:eqversion:9030

Trust: 0.6

vendor:huaweimodel:espace u1981 v200r003c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1981 v200r003c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1981 v200r003c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace u1981 v100r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:viewpoint v100r008c03scope:eqversion:8660

Trust: 0.6

vendor:huaweimodel:vp9660 v200r001c02scope: - version: -

Trust: 0.6

vendor:huaweimodel:vp9660 v200r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:vp9660 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:vp9660 v500r002c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:usg9500 v500r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:usg9500 v500r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:usg9500 v500r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:usg9520 v300r001c01scope: - version: -

Trust: 0.6

vendor:huaweimodel:usg9520 v300r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:usg9560 v300r001c01scope: - version: -

Trust: 0.6

vendor:huaweimodel:usg9560 v300r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:usg9580 v300r001c01scope: - version: -

Trust: 0.6

vendor:huaweimodel:usg9580 v300r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c01scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v100r001c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te60 v600r006c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te50 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te50 v600r006c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te40 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te40 v600r006c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v100r001c02scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v100r001c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:te30 v600r006c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:dp300 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:ips module v500r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:ips module v100r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:ips module v100r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:ips module v500r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:ips module v500r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:ips module v500r001c50scope: - version: -

Trust: 0.6

vendor:huaweimodel:ips module v100r001c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:ngfw module v500r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:ngfw module v100r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:ngfw module v100r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:ngfw module v500r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:ngfw module v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:ngfw module v500r002c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:ngfw module v100r001c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:nip6300 v500r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:nip6300 v500r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:nip6300 v500r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:nip6300 v500r001c50scope: - version: -

Trust: 0.6

vendor:huaweimodel:nip6600 v500r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:nip6600 v500r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:nip6600 v500r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:nip6600 v500r001c50scope: - version: -

Trust: 0.6

vendor:huaweimodel:nip6800 v500r001c50scope: - version: -

Trust: 0.6

vendor:huaweimodel:rp200 v500r002c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:rp200 v600r006c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:svn5600 v200r003c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:svn5600 v200r003c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:svn5800 v200r003c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:svn5800 v200r003c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:svn5800-c v200r003c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:svn5800-c v200r003c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:semg9811 v300r001c01scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6300 v100r001c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6300 v100r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6300 v100r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6300 v500r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6300 v500r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6300 v500r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6300 v500r001c50scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6500 v500r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6500 v100r001c10scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6500 v100r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6500 v100r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6500 v500r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6500 v500r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6500 v500r001c50scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6600 v500r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6600 v500r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6600 v500r001c30scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6600 v500r001c50scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6600 v100r001c00scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6600 v100r001c20scope: - version: -

Trust: 0.6

vendor:huaweimodel:secospace usg6600 v100r001c30scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2017-37972 // JVNDB: JVNDB-2017-012481 // CNNVD: CNNVD-201712-065 // NVD: CVE-2017-15335

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2017-15335
value: MEDIUM

Trust: 1.0

NVD: CVE-2017-15335
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2017-37972
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201712-065
value: MEDIUM

Trust: 0.6

VULHUB: VHN-106147
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2017-15335
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2017-37972
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-106147
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2017-15335
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
exploitabilityScore: 3.9
impactScore: 1.4
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2017-37972 // VULHUB: VHN-106147 // JVNDB: JVNDB-2017-012481 // CNNVD: CNNVD-201712-065 // NVD: CVE-2017-15335

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-106147 // JVNDB: JVNDB-2017-012481 // NVD: CVE-2017-15335

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201712-065

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201712-065

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2017-012481

PATCH
title:huawei-sa-20171201-01-sipurl:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en
Trust: 0.8
title:Patch for multiple Huawei product SIP backup module buffer overflow vulnerability (CNVD-2017-37972)url:https://www.cnvd.org.cn/patchInfo/show/111627
Trust: 0.6
title:Multiple Huawei product SIP Backup module buffer error vulnerability fixesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=76893
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2017-37972 // 
            
            
            
            JVNDB: JVNDB-2017-012481 // 
            
            
            
            CNNVD: CNNVD-201712-065

EXTERNAL IDS
db:NVDid:CVE-2017-15335
Trust: 3.1
db:JVNDBid:JVNDB-2017-012481
Trust: 0.8
db:CNNVDid:CNNVD-201712-065
Trust: 0.7
db:CNVDid:CNVD-2017-37972
Trust: 0.6
db:VULHUBid:VHN-106147
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2017-37972 // 
            
            
            
            VULHUB: VHN-106147 // 
            
            
            
            JVNDB: JVNDB-2017-012481 // 
            
            
            
            CNNVD: CNNVD-201712-065 // 
            
            
            
            NVD: CVE-2017-15335

REFERENCES
url:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en
Trust: 1.7
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-15335
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2017-15335
Trust: 0.8
url:http://www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171201-01-sip-cn
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2017-37972 // 
            
            
            
            VULHUB: VHN-106147 // 
            
            
            
            JVNDB: JVNDB-2017-012481 // 
            
            
            
            CNNVD: CNNVD-201712-065 // 
            
            
            
            NVD: CVE-2017-15335

CREDITS
Huawei internal tester
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-201712-065

SOURCES
db:CNVDid:CNVD-2017-37972
db:VULHUBid:VHN-106147
db:JVNDBid:JVNDB-2017-012481
db:CNNVDid:CNNVD-201712-065
db:NVDid:CVE-2017-15335

LAST UPDATE DATE
2024-11-23T22:59:06.684000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2017-37972date:2017-12-25T00:00:00
db:VULHUBid:VHN-106147date:2018-02-27T00:00:00
db:JVNDBid:JVNDB-2017-012481date:2018-03-12T00:00:00
db:CNNVDid:CNNVD-201712-065date:2017-12-05T00:00:00
db:NVDid:CVE-2017-15335date:2024-11-21T03:14:29.333

SOURCES RELEASE DATE
db:CNVDid:CNVD-2017-37972date:2017-12-25T00:00:00
db:VULHUBid:VHN-106147date:2018-02-15T00:00:00
db:JVNDBid:JVNDB-2017-012481date:2018-03-12T00:00:00
db:CNNVDid:CNNVD-201712-065date:2017-12-05T00:00:00
db:NVDid:CVE-2017-15335date:2018-02-15T16:29:00.517