Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-15338 Details

Description

The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20, V200R003C30 has a buffer overflow vulnerability. An attacker would have to find a way to craft specific messages to the affected products. Due to the insufficient validation for SIP messages, successful exploit may cause services abnormal.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:3.7 LOWVector:CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en	CVE	Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Affected Products

Product	Versions
huawei dp300 firmware	v500r002c00
CPE cpe:2.3:o:huawei:dp300_firmware:v500r002c00:::::::* Remediation No remediation found in references.
huawei dp300	All versions
CPE cpe:2.3:h:huawei:dp300:-:::::::* Remediation No remediation found in references.
huawei ips module firmware	v100r001c10 v100r001c20 v100r001c30 v500r001c00 v500r001c20
CPE cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:::::::* cpe:2.3:o:huawei:ips_module_firmware:v100r001c20:::::::* cpe:2.3:o:huawei:ips_module_firmware:v100r001c30:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c50:::::::* Remediation No remediation found in references.
huawei ips module	All versions
CPE cpe:2.3:h:huawei:ips_module:-:::::::* Remediation No remediation found in references.
huawei ngfw module firmware	v100r001c10 v100r001c20 v100r001c30 v500r001c00 v500r001c20
CPE cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c20:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c30:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c10:::::::* Remediation No remediation found in references.
huawei ngfw module	All versions
CPE cpe:2.3:h:huawei:ngfw_module:-:::::::* Remediation No remediation found in references.
huawei nip6300 firmware	v500r001c00 v500r001c20 v500r001c30 v500r001c50
CPE cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c50:::::::* Remediation No remediation found in references.
huawei nip6300	All versions
CPE cpe:2.3:h:huawei:nip6300:-:::::::* Remediation No remediation found in references.
huawei nip6600 firmware	v500r001c00 v500r001c20 v500r001c30 v500r001c50
CPE cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c50:::::::* Remediation No remediation found in references.
huawei nip6600	All versions
CPE cpe:2.3:h:huawei:nip6600:-:::::::* Remediation No remediation found in references.
huawei nip6800 firmware	v500r001c50
CPE cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:::::::* Remediation No remediation found in references.
huawei nip6800	All versions
CPE cpe:2.3:h:huawei:nip6800:-:::::::* Remediation No remediation found in references.
huawei rp200 firmware	v500r002c00 v600r006c0
CPE cpe:2.3:o:huawei:rp200_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:rp200_firmware:v600r006c0:::::::* Remediation No remediation found in references.
huawei rp200	All versions
CPE cpe:2.3:h:huawei:rp200:-:::::::* Remediation No remediation found in references.
huawei svn5600 firmware	v200r003c00 v200r003c10
CPE cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:::::::* cpe:2.3:o:huawei:svn5600_firmware:v200r003c10:::::::* Remediation No remediation found in references.
huawei svn5600	All versions
CPE cpe:2.3:h:huawei:svn5600:-:::::::* Remediation No remediation found in references.
huawei svn5800 firmware	v200r003c00 v200r003c10
CPE cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:::::::* cpe:2.3:o:huawei:svn5800_firmware:v200r003c10:::::::* Remediation No remediation found in references.
huawei svn5800	All versions
CPE cpe:2.3:h:huawei:svn5800:-:::::::* Remediation No remediation found in references.
huawei svn5800-c firmware	v200r003c00 v200r003c10
CPE cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:::::::* cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c10:::::::* Remediation No remediation found in references.
huawei svn5800-c	All versions
CPE cpe:2.3:h:huawei:svn5800-c:-:::::::* Remediation No remediation found in references.
huawei semg9811 firmware	v300r001c01
CPE cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:::::::* Remediation No remediation found in references.
huawei semg9811	All versions
CPE cpe:2.3:h:huawei:semg9811:-:::::::* Remediation No remediation found in references.
huawei secospace usg6300 firmware	v100r001c10 v100r001c20 v100r001c30 v500r001c00 v500r001c20
CPE cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c20:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c30:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c50:::::::* Remediation No remediation found in references.
huawei secospace usg6300	All versions
CPE cpe:2.3:h:huawei:secospace_usg6300:-:::::::* Remediation No remediation found in references.
huawei secospace usg6500 firmware	v100r001c10 v100r001c20 v100r001c30 v500r001c00 v500r001c20
CPE cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c20:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c30:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c50:::::::* Remediation No remediation found in references.
huawei secospace usg6500	All versions
CPE cpe:2.3:h:huawei:secospace_usg6500:-:::::::* Remediation No remediation found in references.
huawei secospace usg6600 firmware	v100r001c00 v100r001c20 v100r001c30 v500r001c00 v500r001c20
CPE cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c20:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c30:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:::::::* Remediation No remediation found in references.
huawei secospace usg6600	All versions
CPE cpe:2.3:h:huawei:secospace_usg6600:-:::::::* Remediation No remediation found in references.
huawei te30 firmware	v100r001c02 v100r001c10 v500r002c00 v600r006c00
CPE cpe:2.3:o:huawei:te30_firmware:v100r001c02:::::::* cpe:2.3:o:huawei:te30_firmware:v100r001c10:::::::* cpe:2.3:o:huawei:te30_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:te30_firmware:v600r006c00:::::::* Remediation No remediation found in references.
huawei te30	All versions
CPE cpe:2.3:h:huawei:te30:-:::::::* Remediation No remediation found in references.
huawei te40 firmware	v500r002c00 v600r006c00
CPE cpe:2.3:o:huawei:te40_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:te40_firmware:v600r006c00:::::::* Remediation No remediation found in references.
huawei te40	All versions
CPE cpe:2.3:h:huawei:te40:-:::::::* Remediation No remediation found in references.
huawei te50 firmware	v500r002c00 v600r006c00
CPE cpe:2.3:o:huawei:te50_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:te50_firmware:v600r006c00:::::::* Remediation No remediation found in references.
huawei te50	All versions
CPE cpe:2.3:h:huawei:te50:-:::::::* Remediation No remediation found in references.
huawei te60 firmware	v100r001c01 v100r001c10 v500r002c00 v600r006c00
CPE cpe:2.3:o:huawei:te60_firmware:v100r001c01:::::::* cpe:2.3:o:huawei:te60_firmware:v100r001c10:::::::* cpe:2.3:o:huawei:te60_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:te60_firmware:v600r006c00:::::::* Remediation No remediation found in references.
huawei te60	All versions
CPE cpe:2.3:h:huawei:te60:-:::::::* Remediation No remediation found in references.
huawei usg9500 firmware	v500r001c00 v500r001c20 v500r001c30
CPE cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:::::::* Remediation No remediation found in references.
huawei usg9500	All versions
CPE cpe:2.3:h:huawei:usg9500:-:::::::* Remediation No remediation found in references.
huawei usg9520 firmware	v300r001c01 v300r001c20
CPE cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:::::::* cpe:2.3:o:huawei:usg9520_firmware:v300r001c20:::::::* Remediation No remediation found in references.
huawei usg9520	All versions
CPE cpe:2.3:h:huawei:usg9520:-:::::::* Remediation No remediation found in references.
huawei usg9560 firmware	v300r001c01 v300r001c20
CPE cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:::::::* cpe:2.3:o:huawei:usg9560_firmware:v300r001c20:::::::* Remediation No remediation found in references.
huawei usg9560	All versions
CPE cpe:2.3:h:huawei:usg9560:-:::::::* Remediation No remediation found in references.
huawei usg9580 firmware	v300r001c01 v300r001c20
CPE cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:::::::* cpe:2.3:o:huawei:usg9580_firmware:v300r001c20:::::::* Remediation No remediation found in references.
huawei usg9580	All versions
CPE cpe:2.3:h:huawei:usg9580:-:::::::* Remediation No remediation found in references.
huawei vp9660 firmware	v200r001c02 v200r001c30 v500r002c00 v500r002c10
CPE cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:::::::* cpe:2.3:o:huawei:vp9660_firmware:v200r001c30:::::::* cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:::::::* Remediation No remediation found in references.
huawei vp9660	All versions
CPE cpe:2.3:h:huawei:vp9660:-:::::::* Remediation No remediation found in references.
huawei viewpoint 8660 firmware	v100r008c03
CPE cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:::::::* Remediation No remediation found in references.
huawei viewpoint 8660	All versions
CPE cpe:2.3:h:huawei:viewpoint_8660:-:::::::* Remediation No remediation found in references.
huawei viewpoint 9030 firmware	v100r011c02 v100r011c03
CPE cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:::::::* cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:::::::* Remediation No remediation found in references.
huawei viewpoint 9030	All versions
CPE cpe:2.3:h:huawei:viewpoint_9030:-:::::::* Remediation No remediation found in references.
huawei espace u1981 firmware	v100r001c20 v200r003c00 v200r003c20 v200r003c30
CPE cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:::::::* cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:::::::* cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:::::::* cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:::::::* Remediation No remediation found in references.
huawei espace u1981	All versions
CPE cpe:2.3:h:huawei:espace_u1981:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 27, 2018	Initial Analysis	[email protected]

CVE-2017-15338 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation