cnvd - cnvd-2018-05086

CNVD-2018-05086

Vulnerability from cnvd - Published: 2018-03-13

Title

多款Huawei产品SCCPX模块无效内存访问漏洞

Description

Huawei DP300、RP200、TE系列等是中国华为（Huawei）公司的一体化桌面智真和一体化视频会议终端产品。多款Huawei产品SCCPX模块存在无效内存访问漏洞，该漏洞是由于设备未能对报文校验进行充分检测。攻击者可通过向设备发送含有特殊参数的报文攻击，成功利用该漏洞可能影响某些服务的可用性。

Severity

中

Patch Name

多款Huawei产品SCCPX模块无效内存访问漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接: http://www.huawei.com/cn/psirt/security-advisories/2018/huawei-sa-20180207-01-sccpx-cn

Reference

http://www.huawei.com/cn/psirt/security-advisories/2018/huawei-sa-20180207-01-sccpx-cn

Impacted products

Name
['Huawei DP300 V500R002C00', 'Huawei TE60 V100R001C10', 'Huawei TE60 V500R002C00', 'Huawei TE60 V600R006C00', 'Huawei RP200 V500R002C00', 'Huawei RP200 V600R006C00', 'Huawei TE40 V500R002C00', 'Huawei TE40 V600R006C00', 'Huawei TE50 V500R002C00', 'Huawei TE50 V600R006C00']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-17219"
    }
  },
  "description": "Huawei DP300\u3001RP200\u3001TE\u7cfb\u5217\u7b49\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u4e00\u4f53\u5316\u684c\u9762\u667a\u771f\u548c\u4e00\u4f53\u5316\u89c6\u9891\u4f1a\u8bae\u7ec8\u7aef\u4ea7\u54c1\u3002\r\n\r\n\u591a\u6b3eHuawei\u4ea7\u54c1SCCPX\u6a21\u5757\u5b58\u5728\u65e0\u6548\u5185\u5b58\u8bbf\u95ee\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u8bbe\u5907\u672a\u80fd\u5bf9\u62a5\u6587\u6821\u9a8c\u8fdb\u884c\u5145\u5206\u68c0\u6d4b\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u8bbe\u5907\u53d1\u9001\u542b\u6709\u7279\u6b8a\u53c2\u6570\u7684\u62a5\u6587\u653b\u51fb\uff0c\u6210\u529f\u5229\u7528\u8be5\u6f0f\u6d1e\u53ef\u80fd\u5f71\u54cd\u67d0\u4e9b\u670d\u52a1\u7684\u53ef\u7528\u6027\u3002",
  "discovererName": "Huawei",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5:\r\nhttp://www.huawei.com/cn/psirt/security-advisories/2018/huawei-sa-20180207-01-sccpx-cn",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-05086",
  "openTime": "2018-03-13",
  "patchDescription": "Huawei DP300\u3001RP200\u3001TE\u7cfb\u5217\u7b49\u662f\u4e2d\u56fd\u534e\u4e3a\uff08Huawei\uff09\u516c\u53f8\u7684\u4e00\u4f53\u5316\u684c\u9762\u667a\u771f\u548c\u4e00\u4f53\u5316\u89c6\u9891\u4f1a\u8bae\u7ec8\u7aef\u4ea7\u54c1\u3002\r\n\r\n\u591a\u6b3eHuawei\u4ea7\u54c1SCCPX\u6a21\u5757\u5b58\u5728\u65e0\u6548\u5185\u5b58\u8bbf\u95ee\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u8bbe\u5907\u672a\u80fd\u5bf9\u62a5\u6587\u6821\u9a8c\u8fdb\u884c\u5145\u5206\u68c0\u6d4b\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u8bbe\u5907\u53d1\u9001\u542b\u6709\u7279\u6b8a\u53c2\u6570\u7684\u62a5\u6587\u653b\u51fb\uff0c\u6210\u529f\u5229\u7528\u8be5\u6f0f\u6d1e\u53ef\u80fd\u5f71\u54cd\u67d0\u4e9b\u670d\u52a1\u7684\u53ef\u7528\u6027\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eHuawei\u4ea7\u54c1SCCPX\u6a21\u5757\u65e0\u6548\u5185\u5b58\u8bbf\u95ee\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Huawei DP300 V500R002C00",
      "Huawei TE60 V100R001C10",
      "Huawei TE60 V500R002C00",
      "Huawei TE60 V600R006C00",
      "Huawei RP200 V500R002C00",
      "Huawei RP200 V600R006C00",
      "Huawei TE40 V500R002C00",
      "Huawei TE40 V600R006C00",
      "Huawei TE50 V500R002C00",
      "Huawei TE50 V600R006C00"
    ]
  },
  "referenceLink": "http://www.huawei.com/cn/psirt/security-advisories/2018/huawei-sa-20180207-01-sccpx-cn",
  "serverity": "\u4e2d",
  "submitTime": "2018-02-09",
  "title": "\u591a\u6b3eHuawei\u4ea7\u54c1SCCPX\u6a21\u5757\u65e0\u6548\u5185\u5b58\u8bbf\u95ee\u6f0f\u6d1e"
}

CVE-2017-17219 (GCVE-0-2017-17219)

Vulnerability from cvelistv5 – Published: 2018-03-09 17:00 – Updated: 2024-08-05 20:44

Summary

SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service.

Severity ?

No CVSS data available.

CWE

invalid memory access

Assigner

huawei

References

URL

Tags

http://www.huawei.com/en/psirt/security-advisorie…

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Huawei Technologies Co., Ltd.	DP300; RP200; TE30; TE40; TE50; TE60	Affected: DP300 V500R002C00 Affected: RP200 V500R002C00 Affected: V600R006C00 Affected: TE30 V100R001C10 Affected: V500R002C00 Affected: TE40 V500R002C00 Affected: TE50 V500R002C00 Affected: TE60 V100R001C10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:44:00.349Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "DP300; RP200; TE30; TE40; TE50; TE60",
          "vendor": "Huawei Technologies Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "DP300 V500R002C00"
            },
            {
              "status": "affected",
              "version": "RP200 V500R002C00"
            },
            {
              "status": "affected",
              "version": "V600R006C00"
            },
            {
              "status": "affected",
              "version": "TE30 V100R001C10"
            },
            {
              "status": "affected",
              "version": "V500R002C00"
            },
            {
              "status": "affected",
              "version": "TE40 V500R002C00"
            },
            {
              "status": "affected",
              "version": "TE50 V500R002C00"
            },
            {
              "status": "affected",
              "version": "TE60 V100R001C10"
            }
          ]
        }
      ],
      "datePublic": "2018-02-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "invalid memory access",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-09T16:57:01",
        "orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
        "shortName": "huawei"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@huawei.com",
          "ID": "CVE-2017-17219",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "DP300; RP200; TE30; TE40; TE50; TE60",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "DP300 V500R002C00"
                          },
                          {
                            "version_value": "RP200 V500R002C00"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "TE30 V100R001C10"
                          },
                          {
                            "version_value": "V500R002C00"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "TE40 V500R002C00"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "TE50 V500R002C00"
                          },
                          {
                            "version_value": "V600R006C00"
                          },
                          {
                            "version_value": "TE60 V100R001C10"
                          },
                          {
                            "version_value": "V500R002C00"
                          },
                          {
                            "version_value": "V600R006C00"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Huawei Technologies Co., Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "invalid memory access"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
    "assignerShortName": "huawei",
    "cveId": "CVE-2017-17219",
    "datePublished": "2018-03-09T17:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T20:44:00.349Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-05086

CVE-2017-17219 (GCVE-0-2017-17219)

Tags

Sightings

Nomenclature