Infinite loop in Huawei DP300; RP200; TE30; TE50; TE60; VP9660
Priority LOW 27CWE-835Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-835.
Summary
Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated remote attacker can place a malformed putty key file in system when a system manager load the key an infinite loop happens which lead to reboot the system.
Why it matters now
EPSS 0.00825 57th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | DP300; RP200; TE30; TE50; TE60; VP9660 | DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; VP9660 V500R002C10 | — | No fix listed | CNA |
- DP300; RP200; TE30; TE50; TE60; VP9660 VendorHuawei Affected DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; VP9660 V500R002C10 Fixed in — No fix listed CNA
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:* | v500r002c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:* | v500r002c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:* | v600r006c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:* | v100r001c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:* | v600r006c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:* | v600r006c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:* Versions v500r002c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:* Versions v500r002c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:rp200_firmware:v600r006c00:*:*:*:*:*:*:* Versions v600r006c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:rp200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:te30_firmware:v100r001c10:*:*:*:*:*:*:* Versions v100r001c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:te30_firmware:v600r006c00:*:*:*:*:*:*:* Versions v600r006c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:te30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:te50_firmware:v600r006c00:*:*:*:*:*:*:* Versions v600r006c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:te50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:* | v100r001c10 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:* | v500r002c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:* | v600r006c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:* | v500r002c10 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:te60_firmware:v100r001c10:*:*:*:*:*:*:* Versions v100r001c10 Vulnerable ·Huawei
- cpe:2.3:o:huawei:te60_firmware:v500r002c00:*:*:*:*:*:*:* Versions v500r002c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:te60_firmware:v600r006c00:*:*:*:*:*:*:* Versions v600r006c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:te60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:* Versions v500r002c10 Vulnerable ·Huawei
- cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-17131
- 2026-10-03 Alias added: GHSA-49f9-3p9f-vgr4
References
More Huawei Dp300 Firmware vulnerabilities
- TI-2017-12675 Improper certificate validation in Huawei… CVSS 3.0CRITICAL 9.8
- TI-2017-01964 Improper input validation in Huawei DP300,TE60,TP3106,ViewPoint 9030,eCNS210_TD,eSpace… CVSS 3.0HIGH 8.8
- TI-2020-01779 Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions… CVSS 3.1HIGH 7.5
- TI-2019-14007 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14006 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14005 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
Sources
- CVE-2017-17131 · CVE Program
- CVE-2017-17131 · NVD
- FIRST EPSS
- GHSA-49f9-3p9f-vgr4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences