What’s Vulnerable › Vulnerabilities

CVE-2017-17283

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-02-15 · updated 2026-06-17
• Weakness: CWE-20

Description

Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00 have an out-of-bound read vulnerability. A remote attacker send specially crafted Session Initiation Protocol (SIP) messages to the affected products. Due to insufficient input validation, successful exploit will cause some services abnormal.

Affected products

• DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981: v500r002c00
• Huawei Rp200 Firmware: v500r002c00, v600r006c00
• Huawei Te30 Firmware: v100r001c10, v500r002c00, v600r006c00
• Huawei Te40 Firmware: v500r002c00, v600r006c00
• Huawei Te50 Firmware: v500r002c00, v600r006c00
• Huawei Te60 Firmware: v100r001c01, v100r001c10, v500r002c00, v600r006c00

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-02-sip-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-02-sip-en

Get alerted when CVE-2017-17283 or the next vulnerability affects your stack