cnvd - cnvd-2017-38104

CNVD-2017-38104

Vulnerability from cnvd - Published: 2017-12-26

Title

Huawei DP300 CIDAM协议输入验证漏洞（CNVD-2017-38104）

Description

Huawei DP300是中国华为（Huawei）公司的一款视频会议终端。CIDAM是其中的一个信息传输协议。 Huawei DP300中的CIDAM协议存在输入验证漏洞，该漏洞是由于程序未能充分的验证特定的信息。远程攻击者可通过向目标设备发送恶意构造的信息利用该漏洞造成拒绝服务（破坏正常业务和系统异常）。

Severity

高

Patch Name

Huawei DP300 CIDAM协议输入验证漏洞（CNVD-2017-38104）的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171220-02-cidam-cn

Reference

http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171220-02-cidam-cn

Impacted products

Name
['Huawei DP300 V500R002C00', 'Huawei DP300 V500R002C00B010', 'Huawei DP300 V500R002C00B011', 'Huawei DP300 V500R002C00B012', 'Huawei DP300 V500R002C00B013', 'Huawei DP300 V500R002C00B014', 'Huawei DP300 V500R002C00B017', 'Huawei DP300 V500R002C00B018', 'Huawei DP300 V500R002C00SPC100', 'Huawei DP300 V500R002C00SPC200', 'Huawei DP300 V500R002C00SPC300', 'Huawei DP300 V500R002C00SPC400', 'Huawei DP300 V500R002C00SPC50', 'Huawei DP300 V500R002C00SPC600', 'Huawei DP300 V500R002C00SPC800', 'Huawei DP300 V500R002C00SPC900', 'Huawei DP300 V500R002C00SPCa00']

Name

['Huawei DP300 V500R002C00', 'Huawei DP300 V500R002C00B010', 'Huawei DP300 V500R002C00B011', 'Huawei DP300 V500R002C00B012', 'Huawei DP300 V500R002C00B013', 'Huawei DP300 V500R002C00B014', 'Huawei DP300 V500R002C00B017', 'Huawei DP300 V500R002C00B018', 'Huawei DP300 V500R002C00SPC100', 'Huawei DP300 V500R002C00SPC200', 'Huawei DP300 V500R002C00SPC300', 'Huawei DP300 V500R002C00SPC400', 'Huawei DP300 V500R002C00SPC50', 'Huawei DP300 V500R002C00SPC600', 'Huawei DP300 V500R002C00SPC800', 'Huawei DP300 V500R002C00SPC900', 'Huawei DP300 V500R002C00SPCa00']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-17169"
    }
  },
  "description": "Huawei DP300\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u7ec8\u7aef\u3002CIDAM\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4fe1\u606f\u4f20\u8f93\u534f\u8bae\u3002\r\n\r\nHuawei DP300\u4e2d\u7684CIDAM\u534f\u8bae\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u7684\u9a8c\u8bc1\u7279\u5b9a\u7684\u4fe1\u606f\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u76ee\u6807\u8bbe\u5907\u53d1\u9001\u6076\u610f\u6784\u9020\u7684\u4fe1\u606f\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u7834\u574f\u6b63\u5e38\u4e1a\u52a1\u548c\u7cfb\u7edf\u5f02\u5e38\uff09\u3002",
  "discovererName": "Huawei",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171220-02-cidam-cn",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-38104",
  "openTime": "2017-12-26",
  "patchDescription": "Huawei DP300\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u7ec8\u7aef\u3002CIDAM\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4fe1\u606f\u4f20\u8f93\u534f\u8bae\u3002\r\n\r\nHuawei DP300\u4e2d\u7684CIDAM\u534f\u8bae\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u7684\u9a8c\u8bc1\u7279\u5b9a\u7684\u4fe1\u606f\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u76ee\u6807\u8bbe\u5907\u53d1\u9001\u6076\u610f\u6784\u9020\u7684\u4fe1\u606f\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u7834\u574f\u6b63\u5e38\u4e1a\u52a1\u548c\u7cfb\u7edf\u5f02\u5e38\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Huawei DP300 CIDAM\u534f\u8bae\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff08CNVD-2017-38104\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Huawei DP300 V500R002C00",
      "Huawei DP300 V500R002C00B010",
      "Huawei DP300 V500R002C00B011",
      "Huawei DP300 V500R002C00B012",
      "Huawei DP300 V500R002C00B013",
      "Huawei DP300 V500R002C00B014",
      "Huawei DP300 V500R002C00B017",
      "Huawei DP300 V500R002C00B018",
      "Huawei DP300 V500R002C00SPC100",
      "Huawei DP300 V500R002C00SPC200",
      "Huawei DP300 V500R002C00SPC300",
      "Huawei DP300 V500R002C00SPC400",
      "Huawei DP300 V500R002C00SPC50",
      "Huawei DP300 V500R002C00SPC600",
      "Huawei DP300 V500R002C00SPC800",
      "Huawei DP300 V500R002C00SPC900",
      "Huawei DP300 V500R002C00SPCa00"
    ]
  },
  "referenceLink": "http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171220-02-cidam-cn",
  "serverity": "\u9ad8",
  "submitTime": "2017-12-21",
  "title": "Huawei DP300 CIDAM\u534f\u8bae\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff08CNVD-2017-38104\uff09"
}

CVE-2017-17169 (GCVE-0-2017-17169)

Vulnerability from cvelistv5 – Published: 2018-03-09 17:00 – Updated: 2024-08-05 20:43

Summary

The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900.

Severity ?

No CVSS data available.

CWE

Input Validation

Assigner

huawei

References

URL

Tags

https://www.huawei.com/en/psirt/security-advisori…

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981	Affected: V500R002C00 Affected: V500R002C00B010 Affected: V500R002C00B011 Affected: V500R002C00B012 Affected: V500R002C00B013 Affected: V500R002C00B014 Affected: V500R002C00B017 Affected: V500R002C00B018 Affected: V500R002C00SPC100 Affected: V500R002C00SPC200 Affected: V500R002C00SPC300 Affected: V500R002C00SPC400 Affected: V500R002C00SPC500 Affected: V500R002C00SPC600 Affected: V500R002C00SPC800 Affected: V500R002C00SPC900 Affected: V500R002C00SPCa00 Affected: V600R006C00 Affected: V600R006C00SPC200 Affected: V600R006C00SPC300 Affected: V600R006C00SPC400 Affected: V600R006C00SPC500 Affected: V100R001C10SPC300 Affected: V100R001C10SPC500 Affected: V100R001C10SPC600 Affected: V100R001C10SPC700B010 Affected: V500R002C00SPC700 Affected: V500R002C00SPCb00 Affected: V100R001C10 Affected: V100R001C10B001 Affected: V100R001C10B002 Affected: V100R001C10B010 Affected: V100R001C10B011 Affected: V100R001C10B012 Affected: V100R001C10B013 Affected: V100R001C10B014 Affected: V100R001C10B016 Affected: V100R001C10B017 Affected: V100R001C10B018 Affected: V100R001C10B019 Affected: V100R001C10SPC400 Affected: V100R001C10SPC700 Affected: V100R001C10SPC800B011 Affected: V100R001C10SPC900 Affected: V500R002C00SPCd00 Affected: V500R002C00SPCe00 Affected: V600R006C00SPC100 Affected: V200R003C20SPC900

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:43:59.925Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "V500R002C00"
            },
            {
              "status": "affected",
              "version": "V500R002C00B010"
            },
            {
              "status": "affected",
              "version": "V500R002C00B011"
            },
            {
              "status": "affected",
              "version": "V500R002C00B012"
            },
            {
              "status": "affected",
              "version": "V500R002C00B013"
            },
            {
              "status": "affected",
              "version": "V500R002C00B014"
            },
            {
              "status": "affected",
              "version": "V500R002C00B017"
            },
            {
              "status": "affected",
              "version": "V500R002C00B018"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC100"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC200"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC300"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC400"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC500"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC600"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC800"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC900"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPCa00"
            },
            {
              "status": "affected",
              "version": "V600R006C00"
            },
            {
              "status": "affected",
              "version": "V600R006C00SPC200"
            },
            {
              "status": "affected",
              "version": "V600R006C00SPC300"
            },
            {
              "status": "affected",
              "version": "V600R006C00SPC400"
            },
            {
              "status": "affected",
              "version": "V600R006C00SPC500"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC300"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC500"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC600"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC700B010"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPC700"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPCb00"
            },
            {
              "status": "affected",
              "version": "V100R001C10"
            },
            {
              "status": "affected",
              "version": "V100R001C10B001"
            },
            {
              "status": "affected",
              "version": "V100R001C10B002"
            },
            {
              "status": "affected",
              "version": "V100R001C10B010"
            },
            {
              "status": "affected",
              "version": "V100R001C10B011"
            },
            {
              "status": "affected",
              "version": "V100R001C10B012"
            },
            {
              "status": "affected",
              "version": "V100R001C10B013"
            },
            {
              "status": "affected",
              "version": "V100R001C10B014"
            },
            {
              "status": "affected",
              "version": "V100R001C10B016"
            },
            {
              "status": "affected",
              "version": "V100R001C10B017"
            },
            {
              "status": "affected",
              "version": "V100R001C10B018"
            },
            {
              "status": "affected",
              "version": "V100R001C10B019"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC400"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC700"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC800B011"
            },
            {
              "status": "affected",
              "version": "V100R001C10SPC900"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPCd00"
            },
            {
              "status": "affected",
              "version": "V500R002C00SPCe00"
            },
            {
              "status": "affected",
              "version": "V600R006C00SPC100"
            },
            {
              "status": "affected",
              "version": "V200R003C20SPC900"
            }
          ]
        }
      ],
      "datePublic": "2017-12-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Input Validation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-23T16:11:50",
        "orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
        "shortName": "huawei"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@huawei.com",
          "ID": "CVE-2017-17169",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "V500R002C00"
                          },
                          {
                            "version_value": "V500R002C00B010"
                          },
                          {
                            "version_value": "V500R002C00B011"
                          },
                          {
                            "version_value": "V500R002C00B012"
                          },
                          {
                            "version_value": "V500R002C00B013"
                          },
                          {
                            "version_value": "V500R002C00B014"
                          },
                          {
                            "version_value": "V500R002C00B017"
                          },
                          {
                            "version_value": "V500R002C00B018"
                          },
                          {
                            "version_value": "V500R002C00SPC100"
                          },
                          {
                            "version_value": "V500R002C00SPC200"
                          },
                          {
                            "version_value": "V500R002C00SPC300"
                          },
                          {
                            "version_value": "V500R002C00SPC400"
                          },
                          {
                            "version_value": "V500R002C00SPC500"
                          },
                          {
                            "version_value": "V500R002C00SPC600"
                          },
                          {
                            "version_value": "V500R002C00SPC800"
                          },
                          {
                            "version_value": "V500R002C00SPC900"
                          },
                          {
                            "version_value": "V500R002C00SPCa00"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "V600R006C00SPC200"
                          },
                          {
                            "version_value": "V600R006C00SPC300"
                          },
                          {
                            "version_value": "V600R006C00SPC400"
                          },
                          {
                            "version_value": "V600R006C00SPC500"
                          },
                          {
                            "version_value": "V100R001C10SPC300"
                          },
                          {
                            "version_value": "V100R001C10SPC500"
                          },
                          {
                            "version_value": "V100R001C10SPC600"
                          },
                          {
                            "version_value": "V100R001C10SPC700B010"
                          },
                          {
                            "version_value": "V500R002C00SPC700"
                          },
                          {
                            "version_value": "V500R002C00SPCb00"
                          },
                          {
                            "version_value": "V100R001C10"
                          },
                          {
                            "version_value": "V100R001C10B001"
                          },
                          {
                            "version_value": "V100R001C10B002"
                          },
                          {
                            "version_value": "V100R001C10B010"
                          },
                          {
                            "version_value": "V100R001C10B011"
                          },
                          {
                            "version_value": "V100R001C10B012"
                          },
                          {
                            "version_value": "V100R001C10B013"
                          },
                          {
                            "version_value": "V100R001C10B014"
                          },
                          {
                            "version_value": "V100R001C10B016"
                          },
                          {
                            "version_value": "V100R001C10B017"
                          },
                          {
                            "version_value": "V100R001C10B018"
                          },
                          {
                            "version_value": "V100R001C10B019"
                          },
                          {
                            "version_value": "V100R001C10SPC400"
                          },
                          {
                            "version_value": "V100R001C10SPC700"
                          },
                          {
                            "version_value": "V100R001C10SPC800B011"
                          },
                          {
                            "version_value": "V100R001C10SPC900"
                          },
                          {
                            "version_value": "V500R002C00SPCd00"
                          },
                          {
                            "version_value": "V500R002C00SPCe00"
                          },
                          {
                            "version_value": "V600R006C00SPC100"
                          },
                          {
                            "version_value": "V200R003C20SPC900"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en",
              "refsource": "CONFIRM",
              "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
    "assignerShortName": "huawei",
    "cveId": "CVE-2017-17169",
    "datePublished": "2018-03-09T17:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T20:43:59.925Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2017-38104

CVE-2017-17169 (GCVE-0-2017-17169)

Tags

Sightings

Nomenclature