Security Advisory - Six Vulnerabilities in Some Huawei Products
- SA No:huawei-sa-20180207-01-soap
- Initial Release Date: Feb 07, 2018
- Last Release Date: Feb 07, 2018
The two vulnerabilities have been assigned two Common Vulnerabilities and Exposures (CVE) IDs: CVE-2017-17182 and CVE-2017-17185.
There are three integer overflow vulnerabilities in some Huawei products. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could cause an integer overflow and might reset a process. (Vulnerability ID: HWPSIRT-2017-08113,HWPSIRT-2017-08114 and HWPSIRT-2017-08117)
The three vulnerabilities have been assigned three Common Vulnerabilities and Exposures (CVE) IDs: CVE-2017-17183, CVE-2017-17184 and CVE-2017-17187.
There is a DoS vulnerability in some Huawei products. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make some data overwritten, leak device memory and potentially reset a process. (Vulnerability ID: HWPSIRT-2017-08116)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-17186.
Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en
|
Product Name |
Affected Version |
Resolved Product and Version |
|
DP300 |
V500R002C00 |
V500R002C00SPCb00 |
|
RP200 |
V500R002C00 |
Upgrade to TEX0 [1] V600R006C00SPC400 |
|
V600R006C00 |
TEX0[1] V600R006C00SPC400 |
|
|
TE30 |
V100R001C10 |
Upgrade to TEX0[1] V600R006C00SPC400 |
|
V500R002C00 |
||
|
V600R006C00 |
TEX0[1] V600R006C00SPC400 |
|
|
TE40 |
V500R002C00 |
Upgrade to TEX0[1] V600R006C00SPC400 |
|
V600R006C00 |
TEX0[1] V600R006C00SPC400 |
|
|
TE50 |
V500R002C00 |
Upgrade to TEX0[1] V600R006C00SPC400 |
|
V600R006C00 |
TEX0[1] V600R006C00SPC400 |
|
|
TE60 |
V100R001C10 |
Upgrade to TEX0[1] V600R006C00SPC400 |
|
V500R002C00 |
||
|
V600R006C00 |
TEX0[1] V600R006C00SPC400 |
Note:
[1] RP200, TE30, TE40, TE50 and TE60 are included in the TEX0 software package.
Successful exploit could make the device access invalid memory and might reset a process.
HWPSIRT-2017-08113,HWPSIRT-2017-08114 and HWPSIRT-2017-08117:
Successful exploit could cause an integer overflow and might reset a process.
HWPSIRT-2017-08116:
Successful exploit could make some data overwritten, leak device memory and potentially reset a process.
HWPSIRT-2017-08112,HWPSIRT-2017-08113,HWPSIRT-2017-08114,HWPSIRT-2017-08115 and HWPSIRT-2017-08117:
Base Score: 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Temporal Score: 4.0 (E:F/RL:O/RC:C)
HWPSIRT-2017-08116:
Base Score: 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Temporal Score: 5.0 (E:F/RL:O/RC:C)
This vulnerability can be exploited only when the following conditions are present:
The attacker gains access to the target device.
Vulnerability details:
Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make the device access invalid memory and might reset a process.
HWPSIRT-2017-08113,HWPSIRT-2017-08114 and HWPSIRT-2017-08117:
This vulnerability can be exploited only when the following conditions are present:
The attacker gains access to the target device.
Vulnerability details:
Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could cause an integer overflow and might reset a process.
HWPSIRT-2017-08116:
This vulnerability can be exploited only when the following conditions are present:
The attacker gains access to the target device.
Vulnerability details:
Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make some data overwritten, leak device memory and potentially reset a process.
Customers should contact Huawei TAC (Huawei Technical Assistance Center) to request the upgrades. For TAC contact information, please refer to Huawei worldwide website at http://www.huawei.com/en/psirt/report-vulnerabilities.
None
Huawei adheres to protecting the ultimate interests of users with best efforts and the principle of responsible disclosure and deal with product security issues through our response mechanism.
To enjoy Huawei PSIRT services and obtain Huawei product vulnerability information, please visit http://www.huawei.com/en/psirt.
To report a security vulnerability in Huawei products and solutions, please send it to PSIRT@huawei.com. For details, please visit http://www.huawei.com/en/psirt/report-vulnerabilities.
