CVE-2017-15324 Denial of service in S12700
Remote attackers can cause Huawei network switches to restart by sending malformed NQA packets, resulting in a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-15324?
CVE-2017-15324 is a high-severity denial of service vulnerability in Huawei Technologies Co., Ltd. S12700, published on 22 Dec 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart.
Weakness: CWE-20
Which versions are affected by CVE-2017-15324?
It affects 2 products.
Products include Huawei S5700 Firmware, Huawei S6700 Firmware.
How do I fix CVE-2017-15324?
No fix has been published for CVE-2017-15324 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2017-15324 being exploited?
There is no known exploitation of CVE-2017-15324 in the wild and no public exploit code.
Other vulnerabilities in Huawei Technologies Co., Ltd. S12700
Sources
Also known as GHSA-x4f4-7jg6-vx7p.