What’s Vulnerable › Vulnerabilities
CVE-2017-15331
- Severity: medium (CVSS 5.3 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-02-15 · updated 2026-06-17
- Weakness: CWE-125
Description
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, MAX PRESENCE V100R001C00, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00SPC200, V600R006C00, RSE6500 V500R002C00, SMC2.0 V100R003C10, V100R005C00, V500R002C00, V500R002C00T, V600R006C00, V600R006C00T, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, ViewPoint 9030 V100R011C02, V100R011C03, have an out-of-bounds read vulnerability in H323 protocol. An unauthenticated, remote attacker may send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.
Affected products
- Huawei Ar120-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar1200-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar1200 Firmware: v200r006c10, v200r006c13, v200r007c00, v200r007c01, v200r007c02, v200r008c20 (+1)
- Huawei Ar150-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar150 Firmware: v200r006c10, v200r007c00, v200r007c01, v200r007c02, v200r008c20, v200r008c30
- Huawei Ar160 Firmware: v200r006c10, v200r006c12, v200r007c00, v200r007c01, v200r007c02, v200r008c20 (+1)
- Huawei Ar200-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar200 Firmware: v200r006c10, v200r007c00, v200r007c01, v200r008c20, v200r008c30
- Huawei Ar2200-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar2200 Firmware: v200r006c10, v200r006c13, v200r006c16pwe, v200r007c00, v200r007c01, v200r007c02 (+2)
- Huawei AR3200: v200r006c10, v200r006c11, v200r007c00, v200r007c01, v200r007c02, v200r008c00 (+3)
- Huawei Ar510 Firmware: v200r006c10, v200r006c12, v200r006c13, v200r006c15, v200r006c16, v200r006c17 (+3)
- DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981: v500r002c00
- Huawei Ips Module Firmware: v100r001c10spc200, v100r001c20, v100r001c30, v500r001c00, v500r001c20, v500r001c30 (+1)
- Huawei Max Presence Firmware: v100r001c00
- Huawei Netengine16Ex Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ngfw Module Firmware: v100r001c10spc200, v100r001c20, v100r001c30, v500r001c00, v500r001c20, v500r002c00 (+1)
- Huawei Nip6300 Firmware: v500r001c00, v500r001c20, v500r001c30, v500r001c50
- Huawei Nip6600 Firmware: v500r001c00, v500r001c20, v500r001c30, v500r001c50
- Huawei Nip6800 Firmware: v500r001c50
- Huawei Rp200 Firmware: v500r002c00spc200, v600r006c00
- Huawei Rse6500 Firmware: v500r002c00
- Huawei Secospace Usg6300 Firmware: v100r001c10, v100r001c20, v100r001c30, v500r001c00, v500r001c20, v500r001c30 (+1)
- Huawei Secospace Usg6500 Firmware: v100r001c10, v100r001c20, v100r001c30, v500r001c00, v500r001c20, v500r001c30 (+1)
- SMC2.0: v100r003c10, v100r005c00, v500r002c00, v500r002c00t, v600r006c00, v600r006c00t
- Huawei Srg1300 Firmware: v200r006c10, v200r007c00, v200r007c02, v200r008c20, v200r008c30
- Huawei Srg2300 Firmware: v200r006c10, v200r007c00, v200r007c02, v200r008c20, v200r008c30
- Huawei Srg3300 Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Svn5600 Firmware: v200r003c00, v200r003c10
- Huawei Svn5800-C Firmware: v200r003c00, v200r003c10
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-h323-en
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-h323-en
Get alerted when CVE-2017-15331 or the next vulnerability affects your stack