Improper input validation in Huawei DP300,TE60,TP3106,ViewPoint 9030,eCNS210_TD,eSpace…
Priority MEDIUM 40CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R004C10,eSpace 7950 with software V200R003C00 and V200R003C30,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30, V200R003C00, V200R003C20 and V200R003C30 have an input validation vulnerability.A remote attacker may exploit this vulnerability by crafting a malformed packet and sending it to the device. A successful exploit could allow the attacker to cause a denial of service or execute arbitrary code.
Why it matters now
EPSS 0.01207 68th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | DP300,TE60,TP3106,ViewPoint 9030,eCNS210_TD,eSpace 7950,eSpace IAD,eSpace U1981 | DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R004C10,eSpace 7950 with software V200R003C00 and V200R003C30,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30, V200R003C00, V200R003C20 and V200R003C30 | — | No fix listed | CNA |
- DP300,TE60,TP3106,ViewPoint 9030,eCNS210_TD,eSpace 7950,eSpace IAD,eSpace U1981 VendorHuawei Affected DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R004C10,eSpace 7950 with software V200R003C00 and V200R003C30,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30, V200R003C00, V200R003C20 and V200R003C30 Fixed in — No fix listed CNA
CPE configurations NVD · 28
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:* | v500r002c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:* | v100r001c01 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:* | v100r001c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:te60_firmware:v100r003c00:*:*:*:*:*:*:* | v100r003c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:* | v500r002c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:* | v600r006c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:tp3106_firmware:v100r001c06:*:*:*:*:*:*:* | v100r001c06 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:* | v100r002c00 | Vulnerable | Huawei |
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:* Versions v500r002c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:* Versions v100r001c01 Vulnerable ·Huawei
- cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:* Versions v100r001c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:te60_firmware:v100r003c00:*:*:*:*:*:*:* Versions v100r003c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:* Versions v500r002c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:* Versions v600r006c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:tp3106_firmware:v100r001c06:*:*:*:*:*:*:* Versions v100r001c06 Vulnerable ·Huawei
- cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:* Versions v100r002c00 Vulnerable ·Huawei
Show 18 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:* | v100r011c02 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:* | v100r011c03 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10:*:*:*:*:*:*:* | v100r004c10 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ecns210_td:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:espace_7950_firmware:v200r003c00:*:*:*:*:*:*:* | v200r003c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_7950_firmware:v200r003c30:*:*:*:*:*:*:* | v200r003c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:espace_7950:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:espace_iad_firmware:v300r001c07spca00:*:*:*:*:*:*:* | v300r001c07spca00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_iad_firmware:v300r002c01spcb00:*:*:*:*:*:*:* | v300r002c01spcb00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:espace_iad:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:* | v100r001c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c30:*:*:*:*:*:*:* | v100r001c30 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:*:*:*:*:*:*:* | v200r003c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:* | v200r003c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:* | v200r003c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:h:huawei:tp3106:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:* Versions v100r011c02 Vulnerable ·Huawei
- cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c03:*:*:*:*:*:*:* Versions v100r011c03 Vulnerable ·Huawei
- cpe:2.3:h:huawei:viewpoint_9030:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ecns210_td_firmware:v100r004c10:*:*:*:*:*:*:* Versions v100r004c10 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ecns210_td:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:espace_7950_firmware:v200r003c00:*:*:*:*:*:*:* Versions v200r003c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_7950_firmware:v200r003c30:*:*:*:*:*:*:* Versions v200r003c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:espace_7950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:espace_iad_firmware:v300r001c07spca00:*:*:*:*:*:*:* Versions v300r001c07spca00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_iad_firmware:v300r002c01spcb00:*:*:*:*:*:*:* Versions v300r002c01spcb00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:espace_iad:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:* Versions v100r001c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c30:*:*:*:*:*:*:* Versions v100r001c30 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c00:*:*:*:*:*:*:* Versions v200r003c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c20:*:*:*:*:*:*:* Versions v200r003c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:espace_u1981_firmware:v200r003c30:*:*:*:*:*:*:* Versions v200r003c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:espace_u1981:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-2722
- 2026-10-03 Alias added: GHSA-x3xv-mxfr-cgf8
References
More Huawei Dp300 Firmware vulnerabilities
- TI-2017-12675 Improper certificate validation in Huawei… CVSS 3.0CRITICAL 9.8
- TI-2020-01779 Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions… CVSS 3.1HIGH 7.5
- TI-2019-14007 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14006 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14005 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14004 Integer overflow in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine… CVSS 3.1HIGH 7.5
Sources
- CVE-2017-2722 · CVE Program
- CVE-2017-2722 · NVD
- FIRST EPSS
- GHSA-x3xv-mxfr-cgf8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences