Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20;…

Description

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.

Scores

EPSS (exploitation in 30 days)

0.22% · top 88% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.3.

Weakness

• memory leak
• CWE-772 (opens in a new tab)All about CWE-772 and its CVEs

Affected products

• Huawei Technologies Co., Ltd. · AR3200; NGFW Module

  • affected AR3200 V200R005C32
  • affected V200R006C10
  • affected V200R006C11
  • affected V200R007C00
  • affected V200R007C01
  • affected V200R007C02
  • affected V200R008C00
  • affected V200R008C10
  • affected V200R008C20
  • affected V200R008C30
  • affected NGFW Module V500R001C00
  • affected V500R001C20
  • affected V500R002C00

References (1)

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-en (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-17330](https://trackcve.app/badge/CVE-2017-17330.svg)](https://trackcve.app/cve/CVE-2017-17330)

Record last updated 5 Aug 2024, 20:51 UTC.