CVE-2017-17330: Low severity Huawei Ar3200 Firmware vulnerability
Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2017-17330.
What software versions are affected?
The affected software versions are Huawei AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, NGFW Module V500R001C00, V500R001C20, V500R002C00.
What is the severity of CVE-2017-17330?
The severity of CVE-2017-17330 is low, with a severity value of 3.3.
What is the description of CVE-2017-17330?
CVE-2017-17330 is a memory leak vulnerability in Huawei AR3200 and NGFW Module firmware versions mentioned above. The software fails to release allocated memory properly when parsing XML.
How can I fix CVE-2017-17330?
To fix CVE-2017-17330, Huawei has provided a security advisory with mitigation measures. Please refer to the official Huawei website for more information.