What’s Vulnerable › Vulnerabilities

CVE-2017-17318

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-30 · updated 2026-06-17
• Weakness: CWE-20

Description

Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before E5771h-937TCPU-V200R001B329D05SP00C1308 have a Denial of Service (DoS) vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a DoS attack by exploiting this vulnerability.

Affected products

• Huawei Technologies Co., Ltd. E5771h-937: before v200r001b329d05sp00c1308; before v200r001b328d62sp00c1133 — fixed in v200r001b328d62sp00c1133, v200r001b329d05sp00c1308

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. E5771h-937 v200r001b328d62sp00c1133, v200r001b329d05sp00c1308. Check the vendor advisory for mitigations.

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180428-01-mbb-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180428-01-mbb-en

Get alerted when CVE-2017-17318 or the next vulnerability affects your stack