CVE-2017-15343: Integer Overflow
First published: Thu Feb 15 2018(Updated: )
Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could system reboot.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Ar120-s Firmware | =v200r006c10 | |
| Huawei Ar120-s Firmware | =v200r007c00 | |
| Huawei Ar120-s Firmware | =v200r008c20 | |
| Huawei Ar120-s Firmware | =v200r008c30 | |
| Huawei Ar1200 Firmware | =v200r007c01 | |
| Huawei Ar1200 Firmware | =v200r007c02 | |
| Huawei Ar3200 Firmware | =v200r006c11 | |
| Huawei Ar3200 Firmware | =v200r008c00 | |
| Huawei Ar3200 Firmware | =v200r008c10 | |
| Huawei AR3200 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2017-15343.
What is the severity of CVE-2017-15343?
The severity of CVE-2017-15343 is high with a severity value of 7.5.
Which Huawei AR3200 software versions are affected by CVE-2017-15343?
Huawei AR3200 software versions V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 are affected by CVE-2017-15343.
What is the vulnerability description of CVE-2017-15343?
CVE-2017-15343 is an integer overflow vulnerability in Huawei AR3200 software versions V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30. It allows a remote unauthenticated attacker to execute arbitrary code.
How can I fix CVE-2017-15343?
To fix CVE-2017-15343, apply the latest software patch or upgrade to a non-vulnerable software version provided by Huawei.
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei ar120-s firmware
- version/huawei ar120-s firmware/v200r006c10
- version/huawei ar120-s firmware/v200r007c00
- version/huawei ar120-s firmware/v200r008c20
- version/huawei ar120-s firmware/v200r008c30
- canonical/huawei ar1200 firmware
- version/huawei ar1200 firmware/v200r007c01
- version/huawei ar1200 firmware/v200r007c02
- canonical/huawei ar3200 firmware
- version/huawei ar3200 firmware/v200r006c11
- version/huawei ar3200 firmware/v200r008c00
- version/huawei ar3200 firmware/v200r008c10
- canonical/huawei ar3200