Summaryinfo

A vulnerability was found in Huawei RP200, TE30, TE40, TE50 and TE60. It has been classified as critical. Affected is an unknown function of the component SS7 Packet Handler. The manipulation leads to out-of-bounds. This vulnerability is traded as CVE-2017-15319. It is possible to launch the attack remotely. There is no exploit available. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Detailsinfo

A vulnerability was found in Huawei RP200, TE30, TE40, TE50 and TE60 (Unified Communication Software) and classified as critical. This issue affects an unknown code block of the component SS7 Packet Handler. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system.

The bug was discovered 11/01/2017. The weakness was released 12/22/2017 (Website). It is possible to read the advisory at huawei.com. The identification of this vulnerability is CVE-2017-15319 since 10/14/2017. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 01/18/2023).

The vulnerability was handled as a non-public zero-day exploit for at least 51 days. During that time the estimated underground price was around $5k-$25k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Entries connected to this vulnerability are available at VDB-111010 and VDB-111012. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Unified Communication Software

Vendor

• Huawei

Name

• RP200
• TE30
• TE40
• TE50
• TE60

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion