| Title | 複数の Huawei 製品における数値処理に関する脆弱性 |
|---|---|
| Summary | 複数の Huawei 製品には、数値処理に関する脆弱性が存在します。 |
| Possible impacts | サービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | Dec. 15, 2017, midnight |
| Registration Date | March 16, 2018, 4:57 p.m. |
| Last Update | March 16, 2018, 4:57 p.m. |
| CVSS3.0 : 重要 | |
| Score | 7.5 |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CVSS2.0 : 危険 | |
| Score | 7.8 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
| Huawei |
| S12700 ファームウェア |
| S5700 ファームウェア |
| S6700 ファームウェア |
| S7700 ファームウェア |
| S9700 ファームウェア |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2018年03月16日] 掲載 |
March 16, 2018, 4:57 p.m. |
| Summary | Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V200R008C00, V200R009C00, S6700 V200R008C00, V200R009C00, S7700 V200R008C00, V200R009C00, S9700 V200R008C00, V200R009C00 have a numeric errors vulnerability. An unauthenticated, remote attacker may send specific TCP messages with keychain authentication option to the affected products. Due to the improper validation of the messages, it will cause numeric errors when handling the messages. Successful exploit will cause the affected products to reset. |
|---|---|
| Publication Date | Feb. 16, 2018, 1:29 a.m. |
| Registration Date | Jan. 26, 2021, 1:19 p.m. |
| Last Update | Nov. 21, 2024, 12:17 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:huawei:s12700_firmware:v200r009c00:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:* | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:huawei:s5700_firmware:v200r009c00:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:* | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:huawei:s6700_firmware:v200r009c00:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:* | ||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:huawei:s7700_firmware:v200r009c00:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:* | ||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:huawei:s9700_firmware:v200r009c00:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:* | ||||