CVE-2017-15342

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-15 · updated 2026-06-17
Weakness: CWE-119

Description

Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100 have a denial of service vulnerability. The software does not correctly calculate the rest size in a buffer when handling SSL connections. A remote unauthenticated attacker could send a lot of crafted SSL messages to the device, successful exploit could cause no space in the buffer and then denial of service.

Affected products

DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981: v500r002c00
Huawei Espace U1981 Firmware: v200r003c30spc100
Huawei Te60 Firmware: v600r006c00
Huawei Tp3106 Firmware: v100r002c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ssl-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ssl-en

Get alerted when CVE-2017-15342 or the next vulnerability affects your stack