ZeroHour

CVE-2017-17281

CVSS 3.0
4.3 medium
EPSS
<1%p55
Published
()
Modified
Description

SFTP module in Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds read vulnerability. A remote, authenticated attacker could exploit this vulnerability by sending specially crafted messages to a target device. Successful exploit may cause some information leak.

Vendors
huawei
Products
dp300 firmware, rp200 firmware, te30 firmware, te40 firmware, te50 firmware, te60 firmware
Weakness
CWE-125
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

In the news

No ingested article mentions this CVE yet.