high
8.8
CWE
20
Advisory Published
Updated

CVE-2017-2722: Input Validation

First published: Wed Nov 22 2017(Updated: )

DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R004C10,eSpace 7950 with software V200R003C00 and V200R003C30,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30, V200R003C00, V200R003C20 and V200R003C30 have an input validation vulnerability.A remote attacker may exploit this vulnerability by crafting a malformed packet and sending it to the device. A successful exploit could allow the attacker to cause a denial of service or execute arbitrary code.

Credit: psirt@huawei.com

Affected SoftwareAffected VersionHow to fix
Huawei Dp300 Firmware=v500r002c00
Huawei DP300
Huawei Te60 Firmware=v100r001c01
Huawei Te60 Firmware=v100r001c10
Huawei Te60 Firmware=v100r003c00
Huawei Te60 Firmware=v500r002c00
Huawei Te60 Firmware=v600r006c00
Huawei TE60
Huawei Tp3106 Firmware=v100r001c06
Huawei Tp3106 Firmware=v100r002c00
Huawei Tp3106
Huawei Viewpoint 9030 Firmware=v100r011c02
Huawei Viewpoint 9030 Firmware=v100r011c03
Huawei Viewpoint 9030
Huawei Ecns210 Td Firmware=v100r004c10
Huawei Ecns210 Td
Huawei Espace 7950 Firmware=v200r003c00
Huawei Espace 7950 Firmware=v200r003c30
Huawei eSpace 7950
Huawei Espace Iad Firmware=v300r001c07spca00
Huawei Espace Iad Firmware=v300r002c01spcb00
Huawei eSpace IAD
Huawei Espace U1981 Firmware=v100r001c20
Huawei Espace U1981 Firmware=v100r001c30
Huawei Espace U1981 Firmware=v200r003c00
Huawei Espace U1981 Firmware=v200r003c20
Huawei Espace U1981 Firmware=v200r003c30
Huawei Espace U1981

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2017-2722?

    CVE-2017-2722 is a vulnerability affecting multiple Huawei products.

  • What is the severity of CVE-2017-2722?

    The severity of CVE-2017-2722 is high, with a severity value of 8.8.

  • Which products are affected by CVE-2017-2722?

    Multiple Huawei products are affected, including DP300 V500R002C00, TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00, and V600R006C00, TP3106 with software V100R001C06 and V100R002C00, ViewPoint 9030 with software V100R011C02 and V100R011C03, eCNS210_TD with software V100R004C10, and eSpace 7950 with software V200R003C00 and V200R003C30.

  • How can I fix the CVE-2017-2722 vulnerability?

    To fix the CVE-2017-2722 vulnerability, it is recommended to apply the latest firmware or software updates provided by Huawei.

  • Where can I find more information about CVE-2017-2722?

    You can find more information about CVE-2017-2722 on the official Huawei security advisory page: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-pse-en

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203