AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02,…

Description

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.

Scores

EPSS (exploitation in 30 days)

1.3% · top 29% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• Input Validation
• CWE-125 (opens in a new tab)All about CWE-125 and its CVEs

Affected products

• Huawei Technologies Co., Ltd. · AR120-S

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR1200

  • affected V200R006C10
  • affected V200R006C13
  • affected V200R007C00
  • affected V200R007C01
  • affected V200R007C02
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR1200-S

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR150

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R007C01
  • affected V200R007C02
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR150-S

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR160

  • affected V200R006C10
  • affected V200R006C12
  • affected V200R007C00
  • affected V200R007C01
  • affected V200R007C02
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR200

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R007C01
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR200-S

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR2200

  • affected V200R006C10
  • affected V200R006C13
  • affected V200R006C16
  • affected V200R007C00
  • affected V200R007C01
  • affected V200R007C02
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR2200-S

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR3200

  • affected V200R006C10
  • affected V200R006C11
  • affected V200R007C00
  • affected V200R007C01
  • affected V200R007C02
  • affected V200R008C00
  • affected V200R008C10
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · AR510

  • affected V200R006C10
  • affected V200R006C12
  • affected V200R006C13
  • affected V200R006C15
  • affected V200R006C16
  • affected V200R006C17
  • affected V200R007C00
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · SRG1300

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R007C02
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · SRG2300

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R007C02
  • affected V200R008C20
  • affected V200R008C30

• Huawei Technologies Co., Ltd. · SRG3300

  • affected V200R006C10
  • affected V200R007C00
  • affected V200R008C20
  • affected V200R008C30

References (1)

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-15317](https://trackcve.app/badge/CVE-2017-15317.svg)](https://trackcve.app/cve/CVE-2017-15317)

Record last updated 17 Sept 2024, 03:23 UTC.