Corporate Worldwide

Back to Main Menu

Huawei Websites

Corporate: Corporate news and information

Consumer: Phones, laptops, tablets, wearables & other devices

Enterprise: Enterprise products, solutions & services

Carrier: Products, solutions & services for carrier networks

Huawei Cloud: Cloud products, solutions & services

Select a Country or Region

Security Advisory - Out-Of-Bounds Read Vulnerability in Some Huawei Products

SA No:huawei-sa-20180131-01-sip
Initial Release Date: Jan 31, 2018
Last Release Date: Jan 31, 2018

Summary

Some Huawei products have an out-of-bounds read vulnerability due to insufficient input validation. An unauthenticated, remote attacker could exploit this vulnerability by sending malformed Session Initiation Protocol(SIP) packets to the target device. Successful exploit could make the device read out of bounds and thus cause a service to be unavailable. (Vulnerability ID: HWPSIRT-2017-11043)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-17202.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180131-01-sip-en

Software Versions and Fixes

Product Name	Affected Version	Resolved Product and Version
AR120-S	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R008C20
	V200R008C30
AR1200	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R007C01
	V200R007C02
	V200R008C20
	V200R008C30
AR1200-S	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R008C20
	V200R008C30
AR150	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R007C01
	V200R007C02
	V200R008C20
	V200R008C30
AR150-S	V200R005C32	Upgrade to V200R009C00SPC300
	V200R007C00
	V200R008C20
	V200R008C30
AR160	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R007C01
	V200R007C02
	V200R008C20
	V200R008C30
AR200	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R007C01
	V200R008C20
	V200R008C30
AR200-S	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R008C20
	V200R008C30
AR2200	V200R006C10	Upgrade to V200R009C00SPC300
	V200R007C00
	V200R007C01
	V200R007C02
	V200R008C20
	V200R008C30
AR2200-S	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R008C20
	V200R008C30
AR3200	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R006C11
	V200R007C00
	V200R007C01
	V200R007C02
	V200R008C00
	V200R008C10
	V200R008C20
	V200R008C30
AR3600	V200R006C10	Upgrade to V200R009C00SPC300
	V200R007C00
	V200R007C01
	V200R008C20
AR510	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R008C20
	V200R008C30
NetEngine16EX	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R008C20
	V200R008C30
SRG1300	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R007C02
	V200R008C20
	V200R008C30
SRG2300	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R007C02
	V200R008C20
	V200R008C30
SRG3300	V200R005C32	Upgrade to V200R009C00SPC300
	V200R006C10
	V200R007C00
	V200R008C20
	V200R008C30

Impact

Successful exploit could make the device read out of bounds and thus cause a server to be unavailable.

Vulnerability Scoring Details

The vulnerability classification has been performed by using the CVSSv3 scoring system (http://www.first.org/cvss/specification-document).
Base Score: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Temporal Score: 7.0 (E:F/RL:O/RC:C)

Technique Details

This vulnerability can be exploited only when the following conditions are present:
The attacker gains access to the device network.
Vulnerability details:
An unauthenticated, remote attacker could exploit this vulnerability by sending malformed Session Initiation Protocol(SIP) packets to the target device. Successful exploit could make the device read out of bounds and thus cause a server to be unavailable.

Temporary Fix

None

Obtaining Fixed Software

Customers should contact Huawei TAC (Huawei Technical Assistance Center) to request the upgrades. For TAC contact information, please refer to Huawei worldwide website at http://www.huawei.com/en/psirt/report-vulnerabilities.

Source

This vulnerability was discovered by Huawei internal tester.

Revision History

2018-01-31 V1.0 INITIAL

FAQs

None

Huawei Security Procedures

Huawei adheres to protecting the ultimate interests of users with best efforts and the principle of responsible disclosure and deal with product security issues through our response mechanism.

To enjoy Huawei PSIRT services and obtain Huawei product vulnerability information, please visit http://www.huawei.com/en/psirt.

To report a security vulnerability in Huawei products and solutions, please send it to PSIRT@huawei.com. For details, please visit http://www.huawei.com/en/psirt/report-vulnerabilities.

Declaration

This document is provided on an "AS IS" basis and does not imply any kind of guarantee or warranty, either express or implied, including the warranties of merchantability or fitness for a particular purpose. In no event shall Huawei or any of its directly or indirectly controlled subsidiaries or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. Your use of the document, by whatsoever means, will be totally at your own risk. Huawei is entitled to amend or update this document from time to time.

Select a Country or Region

Products

Connectivity

Computing

Cloud

Services

Industry Solutions

Consumer Support

Huawei Cloud Support

Enterprise Support

Carrier Support

Partners

Developers

Training & Certification

About Us

News & Events

Explore More

SEARCH HISTORY

Security Advisory - Out-Of-Bounds Read Vulnerability in Some Huawei Products

Select a Country or Region

Connectivity

Computing

Cloud

SEARCH HISTORY

Security Advisory - Out-Of-Bounds Read Vulnerability in Some Huawei Products

Online Services

Consumer Products

Huawei Cloud

Enterprise

Carrier Network