var-201803-1045
Vulnerability from variot
The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900. Huawei DP300 Contains an input validation vulnerability.Tampering with information and disrupting service operations (DoS) There is a possibility of being put into a state. Huawei DP300 is a video conferencing terminal of China's Huawei company. CIDAM is one of the information transmission protocols. A remote attacker can exploit the vulnerability by sending maliciously constructed information to the target device to cause a denial of service (destroying normal business and system anomalies)
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-201803-1045", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00b018", }, { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00spc100", }, { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00spc200", }, { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00spc300", }, { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00spc400", }, { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00spc500", }, { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00spc600", }, { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00spc800", }, { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00spc900", }, { model: "dp300", scope: "eq", trust: 2.4, vendor: "huawei", version: "v500r002c00spca00", }, { model: "dp300", scope: "eq", trust: 1.8, vendor: "huawei", version: "v500r002c00", }, { model: "dp300", scope: "eq", trust: 1.8, vendor: "huawei", version: "v500r002c00b010", }, { model: "dp300", scope: "eq", trust: 1.8, vendor: "huawei", version: "v500r002c00b011", }, { model: "dp300", scope: "eq", trust: 1.8, vendor: "huawei", version: "v500r002c00b012", }, { model: "dp300", scope: "eq", trust: 1.8, vendor: "huawei", version: "v500r002c00b013", }, { model: "dp300", scope: "eq", trust: 1.8, vendor: "huawei", version: "v500r002c00b014", }, { model: "dp300", scope: "eq", trust: 1.8, vendor: "huawei", version: "v500r002c00b017", }, { model: "dp300 v500r002c00", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00b010", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00b011", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00b012", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00b013", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00b014", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00b017", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00b018", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00spc100", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00spc200", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00spc300", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00spc400", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00spc50", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00spc600", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00spc800", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00spc900", scope: null, trust: 0.6, vendor: "huawei", version: null, }, { model: "dp300 v500r002c00spca00", scope: null, trust: 0.6, vendor: "huawei", version: null, }, ], sources: [ { db: "CNVD", id: "CNVD-2017-38104", }, { db: "JVNDB", id: "JVNDB-2017-012875", }, { db: "NVD", id: "CVE-2017-17169", }, { db: "CNNVD", id: "CNNVD-201712-873", }, ], }, configurations: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", children: { "@container": "@list", }, cpe_match: { "@container": "@list", }, data: { "@container": "@list", }, nodes: { "@container": "@list", }, }, data: [ { CVE_data_version: "4.0", nodes: [ { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b013:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b014:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b017:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b018:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b010:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b012:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00b011:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, ], }, ], sources: [ { db: "NVD", id: "CVE-2017-17169", }, ], }, credits: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "The vulnerability was discovered by Huawei internal testing.", sources: [ { db: "CNNVD", id: "CNNVD-201712-873", }, ], trust: 0.6, }, cve: "CVE-2017-17169", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { acInsufInfo: false, accessComplexity: "LOW", accessVector: "NETWORK", authentication: "SINGLE", author: "NVD", availabilityImpact: "PARTIAL", baseScore: 5.5, confidentialityImpact: "NONE", exploitabilityScore: 8, impactScore: 4.9, integrityImpact: "PARTIAL", obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", trust: 1, userInteractionRequired: false, vectorString: "AV:N/AC:L/Au:S/C:N/I:P/A:P", version: "2.0", }, { acInsufInfo: null, accessComplexity: "Low", accessVector: "Network", authentication: "Single", author: "NVD", availabilityImpact: "Partial", baseScore: 5.5, confidentialityImpact: "None", exploitabilityScore: null, id: "CVE-2017-17169", impactScore: null, integrityImpact: "Partial", obtainAllPrivilege: null, obtainOtherPrivilege: null, obtainUserPrivilege: null, severity: "Medium", trust: 0.8, userInteractionRequired: null, vectorString: "AV:N/AC:L/Au:S/C:N/I:P/A:P", version: "2.0", }, { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", author: "CNVD", availabilityImpact: "COMPLETE", baseScore: 9.4, confidentialityImpact: "NONE", exploitabilityScore: 10, id: "CNVD-2017-38104", impactScore: 9.2, integrityImpact: "COMPLETE", severity: "HIGH", trust: 0.6, vectorString: "AV:N/AC:L/Au:N/C:N/I:C/A:C", version: "2.0", }, { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "SINGLE", author: "VULHUB", availabilityImpact: "PARTIAL", baseScore: 5.5, confidentialityImpact: "NONE", exploitabilityScore: 8, id: "VHN-108164", impactScore: 4.9, integrityImpact: "PARTIAL", severity: "MEDIUM", trust: 0.1, vectorString: "AV:N/AC:L/AU:S/C:N/I:P/A:P", version: "2.0", }, ], cvssV3: [ { attackComplexity: "LOW", attackVector: "NETWORK", author: "NVD", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", exploitabilityScore: 1.2, impactScore: 5.2, integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", trust: 1, userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", version: "3.0", }, { attackComplexity: "Low", attackVector: "Network", author: "NVD", availabilityImpact: "High", baseScore: 6.5, baseSeverity: "Medium", confidentialityImpact: "None", exploitabilityScore: null, id: "CVE-2017-17169", impactScore: null, integrityImpact: "High", privilegesRequired: "High", scope: "Unchanged", trust: 0.8, userInteraction: "None", vectorString: "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", version: "3.0", }, ], severity: [ { author: "NVD", id: "CVE-2017-17169", trust: 1.8, value: "MEDIUM", }, { author: "CNVD", id: "CNVD-2017-38104", trust: 0.6, value: "HIGH", }, { author: "CNNVD", id: "CNNVD-201712-873", trust: 0.6, value: "MEDIUM", }, { author: "VULHUB", id: "VHN-108164", trust: 0.1, value: "MEDIUM", }, ], }, ], sources: [ { db: "CNVD", id: "CNVD-2017-38104", }, { db: "VULHUB", id: "VHN-108164", }, { db: "JVNDB", id: "JVNDB-2017-012875", }, { db: "NVD", id: "CVE-2017-17169", }, { db: "CNNVD", id: "CNNVD-201712-873", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900. Huawei DP300 Contains an input validation vulnerability.Tampering with information and disrupting service operations (DoS) There is a possibility of being put into a state. Huawei DP300 is a video conferencing terminal of China's Huawei company. CIDAM is one of the information transmission protocols. A remote attacker can exploit the vulnerability by sending maliciously constructed information to the target device to cause a denial of service (destroying normal business and system anomalies)", sources: [ { db: "NVD", id: "CVE-2017-17169", }, { db: "JVNDB", id: "JVNDB-2017-012875", }, { db: "CNVD", id: "CNVD-2017-38104", }, { db: "VULHUB", id: "VHN-108164", }, ], trust: 2.25, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2017-17169", trust: 3.1, }, { db: "JVNDB", id: "JVNDB-2017-012875", trust: 0.8, }, { db: "CNNVD", id: "CNNVD-201712-873", trust: 0.7, }, { db: "CNVD", id: "CNVD-2017-38104", trust: 0.6, }, { db: "VULHUB", id: "VHN-108164", trust: 0.1, }, ], sources: [ { db: "CNVD", id: "CNVD-2017-38104", }, { db: "VULHUB", id: "VHN-108164", }, { db: "JVNDB", id: "JVNDB-2017-012875", }, { db: "NVD", id: "CVE-2017-17169", }, { db: "CNNVD", id: "CNNVD-201712-873", }, ], }, id: "VAR-201803-1045", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "CNVD", id: "CNVD-2017-38104", }, { db: "VULHUB", id: "VHN-108164", }, ], trust: 1.7, }, iot_taxonomy: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { category: [ "Network device", ], sub_category: null, trust: 0.6, }, ], sources: [ { db: "CNVD", id: "CNVD-2017-38104", }, ], }, last_update_date: "2023-12-18T13:43:48.497000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "huawei-sa-20171220-02-cidam", trust: 0.8, url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en", }, { title: "Patch for HuaweiDP300CIDAM Protocol Input Validation Vulnerability (CNVD-2017-38104)", trust: 0.6, url: "https://www.cnvd.org.cn/patchinfo/show/111719", }, { title: "Huawei DP300 Enter the fix for the verification vulnerability", trust: 0.6, url: "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=77322", }, ], sources: [ { db: "CNVD", id: "CNVD-2017-38104", }, { db: "JVNDB", id: "JVNDB-2017-012875", }, { db: "CNNVD", id: "CNNVD-201712-873", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-20", trust: 1.9, }, ], sources: [ { db: "VULHUB", id: "VHN-108164", }, { db: "JVNDB", id: "JVNDB-2017-012875", }, { db: "NVD", id: "CVE-2017-17169", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 1.7, url: "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en", }, { trust: 1.2, url: "http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20171220-02-cidam-cn", }, { trust: 0.8, url: "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-17169", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2017-17169", }, ], sources: [ { db: "CNVD", id: "CNVD-2017-38104", }, { db: "VULHUB", id: "VHN-108164", }, { db: "JVNDB", id: "JVNDB-2017-012875", }, { db: "NVD", id: "CVE-2017-17169", }, { db: "CNNVD", id: "CNNVD-201712-873", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "CNVD", id: "CNVD-2017-38104", }, { db: "VULHUB", id: "VHN-108164", }, { db: "JVNDB", id: "JVNDB-2017-012875", }, { db: "NVD", id: "CVE-2017-17169", }, { db: "CNNVD", id: "CNNVD-201712-873", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2017-12-26T00:00:00", db: "CNVD", id: "CNVD-2017-38104", }, { date: "2018-03-09T00:00:00", db: "VULHUB", id: "VHN-108164", }, { date: "2018-04-26T00:00:00", db: "JVNDB", id: "JVNDB-2017-012875", }, { date: "2018-03-09T17:29:00.737000", db: "NVD", id: "CVE-2017-17169", }, { date: "2017-12-25T00:00:00", db: "CNNVD", id: "CNNVD-201712-873", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2017-12-26T00:00:00", db: "CNVD", id: "CNVD-2017-38104", }, { date: "2019-12-23T00:00:00", db: "VULHUB", id: "VHN-108164", }, { date: "2018-04-26T00:00:00", db: "JVNDB", id: "JVNDB-2017-012875", }, { date: "2019-12-23T17:15:11.053000", db: "NVD", id: "CVE-2017-17169", }, { date: "2019-12-27T00:00:00", db: "CNNVD", id: "CNNVD-201712-873", }, ], }, threat_type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "remote", sources: [ { db: "CNNVD", id: "CNNVD-201712-873", }, ], trust: 0.6, }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Huawei DP300 Input validation vulnerability", sources: [ { db: "JVNDB", id: "JVNDB-2017-012875", }, ], trust: 0.8, }, type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "input validation error", sources: [ { db: "CNNVD", id: "CNNVD-201712-873", }, ], trust: 0.6, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.