SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2017-17151

Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and…

MEDIUM 5.9EPSS 0.77%

Does this matter?

Lower severity and a low EPSS score (0.77%). Track it; it rarely justifies an emergency change on its own.

Description

Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and ViewPoint 9030 have an insufficient validation vulnerability. Since packet validation is insufficient, an unauthenticated attacker may send special H323 packets to exploit the vulnerability. Successful exploit could allow the attacker to send malicious packets and result in DOS attacks.

CVSS 3.0
5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.77% probability · 56th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-20
Affected
huawei/ar100 firmware · huawei/ar100-s firmware · huawei/ar110-s firmware · huawei/ar120 firmware · huawei/ar120-s firmware · huawei/ar1200 firmware · huawei/ar1200-s firmware · huawei/ar150 firmware · huawei/ar150-s firmware · huawei/ar160 firmware · huawei/ar200 firmware · huawei/ar200-s firmware · huawei/ar2200 firmware · huawei/ar2200-s firmware · huawei/ar3200 firmware · huawei/ar510 firmware · huawei/dp300 firmware · huawei/netengine16ex firmware · huawei/rp200 firmware · huawei/srg1300 firmware · +10 more
Source
psirt@huawei.com
EPSS trend
0%3%5%27 October 2026: 0.77%27 October 202627 October 2026

EPSS 0.8% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.