CVE-2017-17151 Denial of service in AR100,AR100-S,AR110-S,AR120,AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,NetEngine16EX,RP200,SRG1300,SRG2300,SRG3300,TE30,TE40,TE50,TE60,TP3106,TP3206,ViewPoint 8660,ViewPoint 9030

Medium 5.9 Published 15 Feb 2018 Updated 5 Aug 2024

Unauthenticated attackers can cause denial of service on Huawei network devices by sending specially crafted H323 packets due to insufficient validation.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2017-17151?

CVE-2017-17151 is a medium-severity denial of service vulnerability in Huawei Ar3200 Firmware, published on 15 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and ViewPoint 9030 have an insufficient validation vulnerability. Since packet validation is insufficient, an unauthenticated attacker may send special H323 packets to exploit the vulnerability. Successful exploit could allow the attacker to send malicious packets and result in DOS attacks.

Weakness: CWE-20

Which versions are affected by CVE-2017-17151?

It affects 30 products.

Products include Huawei Ar100-S Firmware, Huawei Ar100 Firmware, Huawei Ar110-S Firmware, Huawei Ar120-S Firmware, Huawei Ar1200-S Firmware, Huawei Ar1200 Firmware and 24 more.

How do I fix CVE-2017-17151?

No fix has been published for CVE-2017-17151 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2017-17151 being exploited?

There is no known exploitation of CVE-2017-17151 in the wild and no public exploit code.

Sources

Also known as GHSA-qg78-79j4-jwpv.