Uncontrolled resource consumption in Huawei SoftCo,eSpace U1910,eSpace U1911,eSpace…
Priority LOW 24CWE-400Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-400.
Summary
SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C20, V200R003C30,eSpace U1981 with software V200R003C20 and V200R003C30 have an denial of service (DoS) vulnerability, which allow an attacker with specific permission to craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition.
Why it matters now
EPSS 0.00231 13th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | SoftCo,eSpace U1910,eSpace U1911,eSpace U1930,eSpace U1960,eSpace U1980,eSpace U1981 | SoftCo V200R003C20,eSpace U1910 V200R003C00,eSpace U1910 V200R003C20,eSpace U1910 V200R003C30,eSpace U1911 V200R003C20,eSpace U1911 V200R003C30,eSpace U1930 V200R003C20,eSpace U1930 V200R003C30,eSpace U1960 V200R003C20,eSpace U1960 V200R003C30,eSpace U1980 V200R003C20,eSpace U1980 V200R003C30,eSpace U1981 V200R003C20,eSpace U1981 V200R003C30, | — | No fix listed | CNA |
- SoftCo,eSpace U1910,eSpace U1911,eSpace U1930,eSpace U1960,eSpace U1980,eSpace U1981 VendorHuawei Affected SoftCo V200R003C20,eSpace U1910 V200R003C00,eSpace U1910 V200R003C20,eSpace U1910 V200R003C30,eSpace U1911 V200R003C20,eSpace U1911 V200R003C30,eSpace U1930 V200R003C20,eSpace U1930 V200R003C30,eSpace U1960 V200R003C20,eSpace U1960 V200R003C30,eSpace U1980 V200R003C20,eSpace U1980 V200R003C30,eSpace U1981 V200R003C20,eSpace U1981 V200R003C30, Fixed in — No fix listed CNA
CPE configurations NVD · 21
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:softco_firmware:v200r003c20:*:*:*:*:*:*:* | v200r003c20 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:softco:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:espace_u1910_firmware:v200r003c00:*:*:*:*:*:*:* | v200r003c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1910_firmware:v200r003c20:*:*:*:*:*:*:* | v200r003c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1910_firmware:v200r003c30:*:*:*:*:*:*:* | v200r003c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:espace_u1910:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:espace_u1911_firmware:v200r003c20:*:*:*:*:*:*:* | v200r003c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1911_firmware:v200r003c30:*:*:*:*:*:*:* | v200r003c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:espace_u1911:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:espace_u1930_firmware:v200r003c20:*:*:*:*:*:*:* | v200r003c20 | Vulnerable | Huawei |
- cpe:2.3:o:huawei:softco_firmware:v200r003c20:*:*:*:*:*:*:* Versions v200r003c20 Vulnerable ·Huawei
- cpe:2.3:h:huawei:softco:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:espace_u1910_firmware:v200r003c00:*:*:*:*:*:*:* Versions v200r003c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1910_firmware:v200r003c20:*:*:*:*:*:*:* Versions v200r003c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1910_firmware:v200r003c30:*:*:*:*:*:*:* Versions v200r003c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:espace_u1910:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:espace_u1911_firmware:v200r003c20:*:*:*:*:*:*:* Versions v200r003c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1911_firmware:v200r003c30:*:*:*:*:*:*:* Versions v200r003c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:espace_u1911:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:espace_u1930_firmware:v200r003c20:*:*:*:*:*:*:* Versions v200r003c20 Vulnerable ·Huawei
Show 11 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:espace_u1930_firmware:v200r003c30:*:*:*:*:*:*:* | v200r003c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:espace_u1930:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:espace_u1960_firmware:v200r003c20:*:*:*:*:*:*:* | v200r003c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1960_firmware:v200r003c30:*:*:*:*:*:*:* | v200r003c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:espace_u1960:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:espace_u1980_firmware:v200r003c20:*:*:*:*:*:*:* | v200r003c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1980_firmware:v200r003c30:*:*:*:*:*:*:* | v200r003c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:espace_u1980:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:* | v200r003c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:* | v200r003c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:espace_u1930_firmware:v200r003c30:*:*:*:*:*:*:* Versions v200r003c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:espace_u1930:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:espace_u1960_firmware:v200r003c20:*:*:*:*:*:*:* Versions v200r003c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1960_firmware:v200r003c30:*:*:*:*:*:*:* Versions v200r003c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:espace_u1960:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:espace_u1980_firmware:v200r003c20:*:*:*:*:*:*:* Versions v200r003c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1980_firmware:v200r003c30:*:*:*:*:*:*:* Versions v200r003c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:espace_u1980:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:* Versions v200r003c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:* Versions v200r003c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-2690
- 2026-10-03 Alias added: GHSA-rchp-g55p-pr44
References
More Huawei Espace U1910 Firmware vulnerabilities
- TI-2019-14007 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14006 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14005 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
Sources
- CVE-2017-2690 · CVE Program
- CVE-2017-2690 · NVD
- FIRST EPSS
- GHSA-rchp-g55p-pr44 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences