CVE-2017-15324

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-12-22 · updated 2026-06-17
Weakness: CWE-20

Description

Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart.

Affected products

Huawei S5700 Firmware: v200r005c00
Huawei S6700 Firmware: v200r005c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en

Get alerted when CVE-2017-15324 or the next vulnerability affects your stack