Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality…

Description

Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart.

Scores

EPSS (exploitation in 30 days)

1.3% · top 30% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• DoS
• CWE-20 (opens in a new tab)All about CWE-20 and its CVEs

Affected products

• Huawei Technologies Co., Ltd. · S12700

  • affected V200R006C00
  • affected V200R007C00
  • affected V200R007C01
  • affected V200R007C20
  • affected V200R008C00
  • affected V200R009C00
  • affected V200R010C00

• Huawei Technologies Co., Ltd. · S1700

  • affected V200R006C10
  • affected V200R009C00
  • affected V200R010C00

• Huawei Technologies Co., Ltd. · S2700

  • affected V200R006C00
  • affected V200R006C10
  • affected V200R007C00
  • affected V200R008C00
  • affected V200R009C00
  • affected V200R010C00
  • affected V200R011C00

• Huawei Technologies Co., Ltd. · S5700

  • affected V200R005C00
  • affected V200R006C00
  • affected V200R007C00
  • affected V200R008C00
  • affected V200R009C00
  • affected V200R010C00
  • affected V200R011C00

• Huawei Technologies Co., Ltd. · S6700

  • affected V200R005C00
  • affected V200R008C00
  • affected V200R009C00
  • affected V200R010C00

• Huawei Technologies Co., Ltd. · S7700

  • affected V200R006C00
  • affected V200R007C00
  • affected V200R008C00
  • affected V200R009C00
  • affected V200R010C00

• Huawei Technologies Co., Ltd. · S9700

  • affected V200R006C00
  • affected V200R007C00
  • affected V200R007C01
  • affected V200R008C00
  • affected V200R009C00
  • affected V200R010C00

References (1)

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-15324](https://trackcve.app/badge/CVE-2017-15324.svg)](https://trackcve.app/cve/CVE-2017-15324)

Record last updated 16 Sept 2024, 22:20 UTC.