CVE-2017-15344

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-15 · updated 2026-06-17
Weakness: CWE-190

Description

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could cause system reboot.

Affected products

Huawei Ar120-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
Huawei Ar1200 Firmware: v200r007c01, v200r007c02
Huawei AR3200: v200r006c11, v200r008c00, v200r008c10

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-02-sctp-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-02-sctp-en

Get alerted when CVE-2017-15344 or the next vulnerability affects your stack