Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2017-15324

UNKNOWN
Published 2017-12-22T17:00:00Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2017-15324. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Huawei Technologies Co., Ltd.

S12700

Affected Versions:

V200R006C00 V200R007C00 V200R007C01 V200R007C20 V200R008C00 V200R009C00 V200R010C00
Huawei Technologies Co., Ltd.

S1700

Affected Versions:

V200R006C10 V200R009C00 V200R010C00
Huawei Technologies Co., Ltd.

S2700

Affected Versions:

V200R006C00 V200R006C10 V200R007C00 V200R008C00 V200R009C00 V200R010C00 V200R011C00
Huawei Technologies Co., Ltd.

S5700

Affected Versions:

V200R005C00 V200R006C00 V200R007C00 V200R008C00 V200R009C00 V200R010C00 V200R011C00
Huawei Technologies Co., Ltd.

S6700

Affected Versions:

V200R005C00 V200R008C00 V200R009C00 V200R010C00
Huawei Technologies Co., Ltd.

S7700

Affected Versions:

V200R006C00 V200R007C00 V200R008C00 V200R009C00 V200R010C00
Huawei Technologies Co., Ltd.

S9700

Affected Versions:

V200R006C00 V200R007C00 V200R007C01 V200R008C00 V200R009C00 V200R010C00

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-x4f4-7jg6-vx7p

Advisory Details

Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-15324
WEB http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en

Advisory provided by GitHub Security Advisory Database. Published: May 14, 2022, Modified: May 14, 2022

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en
Published: 2017-12-22T17:00:00Z
Last Modified: 2024-09-16T22:20:26.332Z
Copied to clipboard!