CVE-2017-15341

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-15 · updated 2026-06-17
Weakness: CWE-295

Description

Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE50 V600R006C00, TE60 V600R006C00 have a denial of service vulnerability. The software decodes X.509 certificate in an improper way. A remote unauthenticated attacker could send a crafted X.509 certificate to the device. Successful exploit could result in a denial of service on the device.

Affected products

Huawei AR3200: v200r008c20, v200r008c30
Huawei Te40 Firmware: v600r006c00
Huawei Te50 Firmware: v600r006c00
Huawei Te60 Firmware: v600r006c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-cert-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-cert-en

Get alerted when CVE-2017-15341 or the next vulnerability affects your stack