CVE-2017-15318: Input Validation
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15318?
CVE-2017-15318 is classified as a medium severity vulnerability due to potential exploitation resulting from an out-of-bounds read.
How do I fix CVE-2017-15318?
To fix CVE-2017-15318, upgrade the affected Huawei devices to the latest firmware version provided by Huawei.
What types of devices are affected by CVE-2017-15318?
CVE-2017-15318 affects several Huawei products including the RP200 and TE series firmware versions specified in the vulnerability description.
Can CVE-2017-15318 be exploited remotely?
Yes, CVE-2017-15318 can be exploited remotely due to insufficient input validation in the affected Huawei firmware.
What are the implications of CVE-2017-15318 on my network security?
Exploitation of CVE-2017-15318 could lead to unauthorized access or data leakage, posing a risk to network security.