What’s Vulnerable › Vulnerabilities
CVE-2017-15317
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-12-22 · updated 2026-06-17
- Weakness: CWE-125
Description
AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.
Affected products
- Huawei Ar120-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar1200-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar1200 Firmware: v200r006c10, v200r006c13, v200r007c00, v200r007c01, v200r007c02, v200r008c20 (+1)
- Huawei Ar150-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar150 Firmware: v200r006c10, v200r007c00, v200r007c01, v200r007c02, v200r008c20, v200r008c30
- Huawei Ar160 Firmware: v200r006c10, v200r006c12, v200r007c00, v200r007c01, v200r007c02, v200r008c20 (+1)
- Huawei Ar200-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar200 Firmware: v200r006c10, v200r007c00, v200r007c01, v200r008c20, v200r008c30
- Huawei Ar2200-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar2200 Firmware: v200r006c10, v200r006c13, v200r006c16, v200r007c00, v200r007c01, v200r007c02 (+2)
- Huawei AR3200: v200r006c10, v200r006c11, v200r007c00, v200r007c01, v200r007c02, v200r008c00 (+3)
- Huawei Ar510 Firmware: v200r006c10, v200r006c12, v200r006c13, v200r006c15, v200r006c16, v200r006c17 (+3)
- Huawei Srg1300 Firmware: v200r006c10, v200r007c00, v200r007c02, v200r008c20, v200r008c30
- Huawei Srg2300 Firmware: v200r006c10, v200r007c00, v200r007c02, v200r008c20, v200r008c30
- Huawei Srg3300 Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en
Get alerted when CVE-2017-15317 or the next vulnerability affects your stack