Vulnerability Details CVE-2017-17281
SFTP module in Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds read vulnerability. A remote, authenticated attacker could exploit this vulnerability by sending specially crafted messages to a target device. Successful exploit may cause some information leak.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.4%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
Products affected by CVE-2017-17281
-
cpe:2.3:h:huawei:dp300:-
-
cpe:2.3:h:huawei:rp200:-
-
cpe:2.3:h:huawei:te30:-
-
cpe:2.3:h:huawei:te40:-
-
cpe:2.3:h:huawei:te50:-
-
cpe:2.3:h:huawei:te60:-
-
cpe:2.3:o:huawei:dp300_firmware:v500r002c00
-
cpe:2.3:o:huawei:rp200_firmware:v600r006c00
-
cpe:2.3:o:huawei:te30_firmware:v100r001c10
-
cpe:2.3:o:huawei:te30_firmware:v500r002c00
-
cpe:2.3:o:huawei:te30_firmware:v600r006c00
-
cpe:2.3:o:huawei:te40_firmware:v500r002c00
-
cpe:2.3:o:huawei:te40_firmware:v600r006c00
-
cpe:2.3:o:huawei:te50_firmware:v500r002c00
-
cpe:2.3:o:huawei:te50_firmware:v600r006c00
-
cpe:2.3:o:huawei:te60_firmware:v100r001c10
-
cpe:2.3:o:huawei:te60_firmware:v500r002c00
-
cpe:2.3:o:huawei:te60_firmware:v600r006c00