Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-17293 Details

Description

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30, DP300 V500R002C00, MAX PRESENCE V100R001C00, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RP200 V500R002C00, V600R006C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10 have a buffer overflow vulnerability. An authenticated, local attacker may craft a specific XML file to the affected products. Due to insufficient input validation, successful exploit will cause some service abnormal.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:3.3 LOWVector:CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en	CVE	Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Affected Products

Product	Versions
huawei ar120-s firmware	v200r006c10 v200r007c00 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar120-s	All versions
CPE cpe:2.3:h:huawei:ar120-s:-:::::::* Remediation No remediation found in references.
huawei ar1200 firmware	v200r006c10 v200r006c13 v200r007c00 v200r007c01 v200r007c02
CPE cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:::::::* cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:::::::* cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:::::::* cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar1200	All versions
CPE cpe:2.3:h:huawei:ar1200:-:::::::* Remediation No remediation found in references.
huawei ar1200-s firmware	v200r006c10 v200r007c00 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar1200-s	All versions
CPE cpe:2.3:h:huawei:ar1200-s:-:::::::* Remediation No remediation found in references.
huawei ar150 firmware	v200r006c10 v200r007c00 v200r007c01 v200r007c02 v200r008c20
CPE cpe:2.3:o:huawei:ar150_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar150_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar150_firmware:v200r007c01:::::::* cpe:2.3:o:huawei:ar150_firmware:v200r007c02:::::::* cpe:2.3:o:huawei:ar150_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar150_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar150	All versions
CPE cpe:2.3:h:huawei:ar150:-:::::::* Remediation No remediation found in references.
huawei ar150-s firmware	v200r006c10 v200r007c00 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar150-s	All versions
CPE cpe:2.3:h:huawei:ar150-s:-:::::::* Remediation No remediation found in references.
huawei ar160 firmware	v200r006c10 v200r006c12 v200r007c00 v200r007c01 v200r007c02
CPE cpe:2.3:o:huawei:ar160_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar160_firmware:v200r006c12:::::::* cpe:2.3:o:huawei:ar160_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar160_firmware:v200r007c01:::::::* cpe:2.3:o:huawei:ar160_firmware:v200r007c02:::::::* cpe:2.3:o:huawei:ar160_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar160_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar160	All versions
CPE cpe:2.3:h:huawei:ar160:-:::::::* Remediation No remediation found in references.
huawei ar200 firmware	v200r006c10 v200r007c00 v200r007c01 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:ar200_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar200_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar200_firmware:v200r007c01:::::::* cpe:2.3:o:huawei:ar200_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar200_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar200	All versions
CPE cpe:2.3:h:huawei:ar200:-:::::::* Remediation No remediation found in references.
huawei ar200-s firmware	v200r006c10 v200r007c00 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar200-s	All versions
CPE cpe:2.3:h:huawei:ar200-s:-:::::::* Remediation No remediation found in references.
huawei ar2200 firmware	v200r006c10 v200r006c13 v200r006c16 v200r007c00 v200r007c01
CPE cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:::::::* cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:::::::* cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:::::::* cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:::::::* cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar2200	All versions
CPE cpe:2.3:h:huawei:ar2200:-:::::::* Remediation No remediation found in references.
huawei ar2200-s firmware	v200r006c10 v200r007c00 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar2200-s	All versions
CPE cpe:2.3:h:huawei:ar2200-s:-:::::::* Remediation No remediation found in references.
huawei ar3200 firmware	v200r006c10 v200r006c11 v200r007c00 v200r007c01 v200r007c02
CPE cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:::::::* cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:::::::* cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:::::::* cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:::::::* cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:::::::* cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar3200	All versions
CPE cpe:2.3:h:huawei:ar3200:-:::::::* Remediation No remediation found in references.
huawei ar3600 firmware	v200r006c10 v200r007c00 v200r007c01 v200r008c20
CPE cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar3600_firmware:v200r007c01:::::::* cpe:2.3:o:huawei:ar3600_firmware:v200r008c20:::::::* Remediation No remediation found in references.
huawei ar3600	All versions
CPE cpe:2.3:h:huawei:ar3600:-:::::::* Remediation No remediation found in references.
huawei ar510 firmware	v200r006c10 v200r006c12 v200r006c13 v200r006c15 v200r006c16
CPE cpe:2.3:o:huawei:ar510_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:ar510_firmware:v200r006c12:::::::* cpe:2.3:o:huawei:ar510_firmware:v200r006c13:::::::* cpe:2.3:o:huawei:ar510_firmware:v200r006c15:::::::* cpe:2.3:o:huawei:ar510_firmware:v200r006c16:::::::* cpe:2.3:o:huawei:ar510_firmware:v200r006c17:::::::* cpe:2.3:o:huawei:ar510_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:ar510_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:ar510_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei ar510	All versions
CPE cpe:2.3:h:huawei:ar510:-:::::::* Remediation No remediation found in references.
huawei dp300 firmware	v500r002c00
CPE cpe:2.3:o:huawei:dp300_firmware:v500r002c00:::::::* Remediation No remediation found in references.
huawei dp300	All versions
CPE cpe:2.3:h:huawei:dp300:-:::::::* Remediation No remediation found in references.
huawei max presence firmware	v100r001c00
CPE cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:::::::* Remediation No remediation found in references.
huawei max presence	All versions
CPE cpe:2.3:h:huawei:max_presence:-:::::::* Remediation No remediation found in references.
huawei netengine16ex firmware	v200r006c10 v200r007c00 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:netengine16ex_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei netengine16ex	All versions
CPE cpe:2.3:h:huawei:netengine16ex:-:::::::* Remediation No remediation found in references.
huawei rp200 firmware	v500r002c00 v600r006c00
CPE cpe:2.3:o:huawei:rp200_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:rp200_firmware:v600r006c00:::::::* Remediation No remediation found in references.
huawei rp200	All versions
CPE cpe:2.3:h:huawei:rp200:-:::::::* Remediation No remediation found in references.
huawei srg1300 firmware	v200r006c10 v200r007c00 v200r007c02 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:::::::* cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei srg1300	All versions
CPE cpe:2.3:h:huawei:srg1300:-:::::::* Remediation No remediation found in references.
huawei srg2300 firmware	v200r006c10 v200r007c00 v200r007c02 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:::::::* cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei srg2300	All versions
CPE cpe:2.3:h:huawei:srg2300:-:::::::* Remediation No remediation found in references.
huawei srg3300 firmware	v200r006c10 v200r007c00 v200r008c20 v200r008c30
CPE cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:::::::* cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:::::::* cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:::::::* cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:::::::* Remediation No remediation found in references.
huawei srg3300	All versions
CPE cpe:2.3:h:huawei:srg3300:-:::::::* Remediation No remediation found in references.
huawei te30 firmware	v100r001c02 v100r001c10 v500r002c00 v600r006c00
CPE cpe:2.3:o:huawei:te30_firmware:v100r001c02:::::::* cpe:2.3:o:huawei:te30_firmware:v100r001c10:::::::* cpe:2.3:o:huawei:te30_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:te30_firmware:v600r006c00:::::::* Remediation No remediation found in references.
huawei te30	All versions
CPE cpe:2.3:h:huawei:te30:-:::::::* Remediation No remediation found in references.
huawei te40 firmware	v500r002c00 v600r006c00
CPE cpe:2.3:o:huawei:te40_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:te40_firmware:v600r006c00:::::::* Remediation No remediation found in references.
huawei te40	All versions
CPE cpe:2.3:h:huawei:te40:-:::::::* Remediation No remediation found in references.
huawei te50 firmware	v500r002c00 v600r006c00
CPE cpe:2.3:o:huawei:te50_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:te50_firmware:v600r006c00:::::::* Remediation No remediation found in references.
huawei te50	All versions
CPE cpe:2.3:h:huawei:te50:-:::::::* Remediation No remediation found in references.
huawei te60 firmware	v100r001c01 v100r001c10 v500r002c00 v600r006c00
CPE cpe:2.3:o:huawei:te60_firmware:v100r001c01:::::::* cpe:2.3:o:huawei:te60_firmware:v100r001c10:::::::* cpe:2.3:o:huawei:te60_firmware:v500r002c00:::::::* cpe:2.3:o:huawei:te60_firmware:v600r006c00:::::::* Remediation No remediation found in references.
huawei te60	All versions
CPE cpe:2.3:h:huawei:te60:-:::::::* Remediation No remediation found in references.
huawei tp3106 firmware	v100r002c00
CPE cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:::::::* Remediation No remediation found in references.
huawei tp3106	All versions
CPE cpe:2.3:h:huawei:tp3106:-:::::::* Remediation No remediation found in references.
huawei tp3206 firmware	v100r002c00 v100r002c10
CPE cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:::::::* cpe:2.3:o:huawei:tp3206_firmware:v100r002c10:::::::* Remediation No remediation found in references.
huawei tp3206	All versions
CPE cpe:2.3:h:huawei:tp3206:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Mar 1, 2018	Initial Analysis	[email protected]

CVE-2017-17293 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation