What’s Vulnerable › Vulnerabilities
CVE-2017-8162
- Severity: medium (CVSS 6.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-11-22 · updated 2026-06-17
- Weakness: CWE-119
Description
AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR150-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR160 with software V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR200 with software V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30,AR200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR2200 with software V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR2200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30,AR510 with software V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30,NetEngine16EX with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,SMC2.0 with software V100R003C10, V100R005C00, V500R002C00, V600R006C00,SRG1300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG2300 with software V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30,SRG3300 with software V200R006C10, V200R007C00, V200R008C20, V200R008C30 have a DoS vulnerability. Due to incorrect malformed message processing logic, an authenticated, remote attacker could send specially crafted message to the target device.Successful exploit of the vulnerability could cause stack overflow and make a service unavailable.
Affected products
- Huawei Ar120-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar1200-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar1200 Firmware: v200r006c10, v200r006c13, v200r007c00, v200r007c01, v200r007c02, v200r008c20 (+1)
- Huawei Ar150-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar150 Firmware: v200r006c10, v200r007c00, v200r007c01, v200r007c02, v200r008c20, v200r008c30
- Huawei Ar160 Firmware: v200r006c10, v200r006c12, v200r007c00, v200r007c01, v200r007c02, v200r008c20 (+1)
- Huawei Ar200-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar200 Firmware: v200r006c10, v200r007c00, v200r007c01, v200r008c20, v200r008c30
- Huawei Ar2200-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- Huawei Ar2200 Firmware: v200r006c10, v200r006c13, v200r006c16pwe, v200r007c00, v200r007c01, v200r007c02 (+2)
- Huawei AR3200: v200r006c10, v200r006c11, v200r007c00, v200r007c01, v200r007c02, v200r008c00 (+3)
- Huawei Ar510 Firmware: v200r006c10, v200r006c12, v200r006c13, v200r006c15, v200r006c16, v200r006c17 (+3)
- Huawei Netengine16Ex Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
- SMC2.0: v100r003c10, v100r005c00, v500r002c00, v600r006c00
- Huawei Srg1300 Firmware: v200r006c10, v200r007c00, v200r007c02, v200r008c20, v200r008c30
- Huawei Srg2300 Firmware: v200r006c10, v200r007c00, v200r007c02, v200r008c20, v200r008c30
- Huawei Srg3300 Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c30
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-h323-en
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-h323-en
Get alerted when CVE-2017-8162 or the next vulnerability affects your stack