Out-of-bounds read in Huawei AR120-S
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.
Summary
AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | AR120-S | V200R006C10; V200R007C00; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR1200 | V200R006C10; V200R006C13; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR1200-S | V200R006C10; V200R007C00; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR150 | V200R006C10; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR150-S | V200R006C10; V200R007C00; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR160 | V200R006C10; V200R006C12; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR200 | V200R006C10; V200R007C00; V200R007C01; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR200-S | V200R006C10; V200R007C00; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR2200 | V200R006C10; V200R006C13; V200R006C16; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR2200-S | V200R006C10; V200R007C00; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR3200 | V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | AR510 | V200R006C10; V200R006C12; V200R006C13; V200R006C15; V200R006C16; V200R006C17; V200R007C00; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | SRG1300 | V200R006C10; V200R007C00; V200R007C02; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | SRG2300 | V200R006C10; V200R007C00; V200R007C02; V200R008C20; V200R008C30 | — | No fix listed | CNA |
| Huawei | SRG3300 | V200R006C10; V200R007C00; V200R008C20; V200R008C30 | — | No fix listed | CNA |
- AR120-S VendorHuawei Affected V200R006C10; V200R007C00; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR1200 VendorHuawei Affected V200R006C10; V200R006C13; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR1200-S VendorHuawei Affected V200R006C10; V200R007C00; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR150 VendorHuawei Affected V200R006C10; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR150-S VendorHuawei Affected V200R006C10; V200R007C00; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR160 VendorHuawei Affected V200R006C10; V200R006C12; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR200 VendorHuawei Affected V200R006C10; V200R007C00; V200R007C01; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR200-S VendorHuawei Affected V200R006C10; V200R007C00; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR2200 VendorHuawei Affected V200R006C10; V200R006C13; V200R006C16; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR2200-S VendorHuawei Affected V200R006C10; V200R007C00; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR3200 VendorHuawei Affected V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- AR510 VendorHuawei Affected V200R006C10; V200R006C12; V200R006C13; V200R006C15; V200R006C16; V200R006C17; V200R007C00; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- SRG1300 VendorHuawei Affected V200R006C10; V200R007C00; V200R007C02; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- SRG2300 VendorHuawei Affected V200R006C10; V200R007C00; V200R007C02; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
- SRG3300 VendorHuawei Affected V200R006C10; V200R007C00; V200R008C20; V200R008C30 Fixed in — No fix listed CNA
CPE configurations NVD · 100
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:* | v200r006c13 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:* | v200r007c01 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:* | v200r007c02 | Vulnerable | Huawei |
- cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:* Versions v200r006c13 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:* Versions v200r007c01 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:* Versions v200r007c02 Vulnerable ·Huawei
Show 90 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:* | v200r007c01 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:* | v200r007c02 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:* | v200r006c12 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:* | v200r007c01 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:* | v200r007c02 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:* | v200r007c01 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:* | v200r006c13 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:* | v200r006c16 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:* | v200r007c01 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:* | v200r007c02 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:* | v200r006c11 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:* | v200r007c01 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:* | v200r007c02 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:* | v200r008c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:* | v200r008c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:* | v200r006c12 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:* | v200r006c13 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:* | v200r006c15 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:* | v200r006c16 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:* | v200r006c17 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:* | v200r007c02 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:* | v200r007c02 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:* | v200r006c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:* | v200r007c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:* | v200r008c20 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:* | v200r008c30 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:* Versions v200r007c01 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:* Versions v200r007c02 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:* Versions v200r006c12 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:* Versions v200r007c01 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:* Versions v200r007c02 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:* Versions v200r007c01 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200_firmware:v200r006c13:*:*:*:*:*:*:* Versions v200r006c13 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200_firmware:v200r006c16:*:*:*:*:*:*:* Versions v200r006c16 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200_firmware:v200r007c01:*:*:*:*:*:*:* Versions v200r007c01 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200_firmware:v200r007c02:*:*:*:*:*:*:* Versions v200r007c02 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:* Versions v200r006c11 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:* Versions v200r007c01 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:* Versions v200r007c02 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:* Versions v200r008c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:* Versions v200r008c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:ar510_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar510_firmware:v200r006c12:*:*:*:*:*:*:* Versions v200r006c12 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar510_firmware:v200r006c13:*:*:*:*:*:*:* Versions v200r006c13 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar510_firmware:v200r006c15:*:*:*:*:*:*:* Versions v200r006c15 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar510_firmware:v200r006c16:*:*:*:*:*:*:* Versions v200r006c16 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar510_firmware:v200r006c17:*:*:*:*:*:*:* Versions v200r006c17 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar510_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar510_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:ar510_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:ar510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg1300_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg1300_firmware:v200r007c02:*:*:*:*:*:*:* Versions v200r007c02 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg1300_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg1300_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg2300_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg2300_firmware:v200r007c02:*:*:*:*:*:*:* Versions v200r007c02 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg2300_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg2300_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:* Versions v200r006c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg3300_firmware:v200r007c00:*:*:*:*:*:*:* Versions v200r007c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg3300_firmware:v200r008c20:*:*:*:*:*:*:* Versions v200r008c20 Vulnerable ·Huawei
- cpe:2.3:o:huawei:srg3300_firmware:v200r008c30:*:*:*:*:*:*:* Versions v200r008c30 Vulnerable ·Huawei
- cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-15317
- 2026-10-03 Alias added: GHSA-36mc-vj3q-5jw7
References
More Huawei Ar120-s Firmware vulnerabilities
- TI-2017-12675 Improper certificate validation in Huawei… CVSS 3.0CRITICAL 9.8
- TI-2017-11257 Integer overflow in Huawei AR3200 CVSS 3.0HIGH 7.5
- TI-2017-11256 Integer overflow in Huawei AR3200 CVSS 3.0HIGH 7.5
- TI-2019-14007 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14006 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14005 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
Sources
- CVE-2017-15317 · CVE Program
- CVE-2017-15317 · NVD
- FIRST EPSS
- GHSA-36mc-vj3q-5jw7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences