CVE-2017-15324 — Huawei Technologies Co., Ltd. / S12700

Description (CNA)

Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the device restart.

Affected (CNA)

Vendor / product	Versions
Huawei Technologies Co., Ltd. / S12700	affected V200R006C00; affected V200R007C00; affected V200R007C01; affected V200R007C20; affected V200R008C00; affected V200R009C00; affected V200R010C00
Huawei Technologies Co., Ltd. / S1700	affected V200R006C10; affected V200R009C00; affected V200R010C00
Huawei Technologies Co., Ltd. / S2700	affected V200R006C00; affected V200R006C10; affected V200R007C00; affected V200R008C00; affected V200R009C00; affected V200R010C00; affected V200R011C00
Huawei Technologies Co., Ltd. / S5700	affected V200R005C00; affected V200R006C00; affected V200R007C00; affected V200R008C00; affected V200R009C00; affected V200R010C00; affected V200R011C00
Huawei Technologies Co., Ltd. / S6700	affected V200R005C00; affected V200R008C00; affected V200R009C00; affected V200R010C00
Huawei Technologies Co., Ltd. / S7700	affected V200R006C00; affected V200R007C00; affected V200R008C00; affected V200R009C00; affected V200R010C00
Huawei Technologies Co., Ltd. / S9700	affected V200R006C00; affected V200R007C00; affected V200R007C01; affected V200R008C00; affected V200R009C00; affected V200R010C00

CWE

No CWE identifiers supplied.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en

ADP enrichment

CVE

No English description supplied.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-nqa-en