Improper input validation in DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B017, V500R002C00B018, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC400, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00; RP200 versions V500R002C00SPC200, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE30 versions V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700B010, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE40 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE50 versions V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; TE60 versions V100R001C10, V100R001C10B001, V100R001C10B002, V100R001C10B010, V100R001C10B011, V100R001C10B012, V100R001C10B013, V100R001C10B014, V100R001C10B016, V100R001C10B017, V100R001C10B018, V100R001C10B019, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V100R001C10SPC800B011, V100R001C10SPC900, V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V500R002C00SPCd00, V500R002C00SPCe00, V600R006C00, V600R006C00SPC100, V600R006C00SPC200, V600R006C00SPC300, V600R006C00SPC400, V600R006C00SPC500; eSpace U1981 version V200R003C20SPC900.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981 | V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; V600R006C00SPC400; V600R006C00SPC500; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC700; V500R002C00SPCb00; V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00SPC100; V200R003C20SPC900 | — | No fix listed | CNA |
- DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981 Vendor— Affected V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V600R006C00; V600R006C00SPC200; V600R006C00SPC300; V600R006C00SPC400; V600R006C00SPC500; V100R001C10SPC300; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC700B010; V500R002C00SPC700; V500R002C00SPCb00; V100R001C10; V100R001C10B001; V100R001C10B002; V100R001C10B010; V100R001C10B011; V100R001C10B012; V100R001C10B013; V100R001C10B014; V100R001C10B016; V100R001C10B017; V100R001C10B018; V100R001C10B019; V100R001C10SPC400; V100R001C10SPC700; V100R001C10SPC800B011; V100R001C10SPC900; V500R002C00SPCd00; V500R002C00SPCe00; V600R006C00SPC100; V200R003C20SPC900 Fixed in — No fix listed CNA
CPE configurations NVD · 18
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:* | v500r002c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00b010:*:*:*:*:*:*:* | v500r002c00b010 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00b011:*:*:*:*:*:*:* | v500r002c00b011 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00b012:*:*:*:*:*:*:* | v500r002c00b012 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00b013:*:*:*:*:*:*:* | v500r002c00b013 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00b014:*:*:*:*:*:*:* | v500r002c00b014 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00b017:*:*:*:*:*:*:* | v500r002c00b017 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00b018:*:*:*:*:*:*:* | v500r002c00b018 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:* | v500r002c00spc100 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:* | v500r002c00spc200 | Vulnerable | Huawei |
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:* Versions v500r002c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00b010:*:*:*:*:*:*:* Versions v500r002c00b010 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00b011:*:*:*:*:*:*:* Versions v500r002c00b011 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00b012:*:*:*:*:*:*:* Versions v500r002c00b012 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00b013:*:*:*:*:*:*:* Versions v500r002c00b013 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00b014:*:*:*:*:*:*:* Versions v500r002c00b014 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00b017:*:*:*:*:*:*:* Versions v500r002c00b017 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00b018:*:*:*:*:*:*:* Versions v500r002c00b018 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc100:*:*:*:*:*:*:* Versions v500r002c00spc100 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc200:*:*:*:*:*:*:* Versions v500r002c00spc200 Vulnerable ·Huawei
Show 8 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:* | v500r002c00spc300 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:* | v500r002c00spc400 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:* | v500r002c00spc500 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:* | v500r002c00spc600 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:* | v500r002c00spc800 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:* | v500r002c00spc900 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:* | v500r002c00spca00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc300:*:*:*:*:*:*:* Versions v500r002c00spc300 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc400:*:*:*:*:*:*:* Versions v500r002c00spc400 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc500:*:*:*:*:*:*:* Versions v500r002c00spc500 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc600:*:*:*:*:*:*:* Versions v500r002c00spc600 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc800:*:*:*:*:*:*:* Versions v500r002c00spc800 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00spc900:*:*:*:*:*:*:* Versions v500r002c00spc900 Vulnerable ·Huawei
- cpe:2.3:o:huawei:dp300_firmware:v500r002c00spca00:*:*:*:*:*:*:* Versions v500r002c00spca00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:dp300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-17169
- 2026-10-03 Alias added: GHSA-vf2q-5gq8-fggp
More Huawei Dp300 Firmware vulnerabilities
- TI-2017-12675 Improper certificate validation in Huawei… CVSS 3.0CRITICAL 9.8
- TI-2017-01964 Improper input validation in Huawei DP300,TE60,TP3106,ViewPoint 9030,eCNS210_TD,eSpace… CVSS 3.0HIGH 8.8
- TI-2020-01779 Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions… CVSS 3.1HIGH 7.5
- TI-2019-14007 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14006 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
- TI-2019-14005 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
Sources
- CVE-2017-17169 · CVE Program
- CVE-2017-17169 · NVD
- FIRST EPSS
- GHSA-vf2q-5gq8-fggp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences