CVE-2017-17302: Low severity Huawei Dp300 Firmware vulnerability
Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. An authenticated, local attacker may craft and load some specific Certificate Revocation List(CRL) configuration files to the devices repeatedly. Due to not release allocated memory properly, successful exploit may result in memory leak and services abnormal.
Affected Software
Event History
Frequently Asked Questions
What is vulnerability CVE-2017-17302?
Vulnerability CVE-2017-17302 is a memory leak vulnerability that affects Huawei DP300, RP200, TE30, TE40, TE50, and TE60 devices.
Which Huawei devices are affected by CVE-2017-17302?
Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, and TE60 V100R001C10, V500R002C00, V600R006C00 are affected by CVE-2017-17302.
What is the severity of vulnerability CVE-2017-17302?
The severity of vulnerability CVE-2017-17302 is low, with a severity value of 3.3.
How can an attacker exploit CVE-2017-17302?
An authenticated, local attacker can exploit CVE-2017-17302 by crafting and loading specific certificates.
Is there a fix available for CVE-2017-17302?
Please refer to the official Huawei security advisory at the provided link for information on available fixes for CVE-2017-17302.