CVE-2017-15320

High

Published: 22/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Some Huawei products, such as RP200, TE30, TE40, TE50, and TE60, have out-of-bounds read vulnerabilities. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices.

Risk Assessment

Exploitation of this vulnerability may lead to out-of-bounds read and potentially crash the system, posing a risk to the continuity of the organization's operations.

Recommendation

It is recommended to update the device firmware to the latest versions that address these vulnerabilities and implement appropriate security measures against unauthorized access.

Other vulnerabilities in RP200, TE30, TE40, TE50, TE60

CVE-2017-15318High
Some Huawei products, such as RP200, TE30, TE40, TE50, and TE60, have out-of-bounds read vulnerabilities due to insufficient input validation. A remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices.

Original NVD description (English source)

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS