{"id":"CVE-2017-17151","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-17151","generatedAt":"2026-10-28T20:47:59.320Z","title":"Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and…","description":"Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and ViewPoint 9030 have an insufficient validation vulnerability. Since packet validation is insufficient, an unauthenticated attacker may send special H323 packets to exploit the vulnerability. Successful exploit could allow the attacker to send malicious packets and result in DOS attacks.","published":"2018-02-15T16:29:02.000Z","lastModified":"2026-06-17T01:10:27.000Z","status":"Modified","sourceIdentifier":"psirt@huawei.com","cvss":{"version":"3.0","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-20"],"affected":["huawei/ar100 firmware","huawei/ar100-s firmware","huawei/ar110-s firmware","huawei/ar120 firmware","huawei/ar120-s firmware","huawei/ar1200 firmware","huawei/ar1200-s firmware","huawei/ar150 firmware","huawei/ar150-s firmware","huawei/ar160 firmware","huawei/ar200 firmware","huawei/ar200-s firmware","huawei/ar2200 firmware","huawei/ar2200-s firmware","huawei/ar3200 firmware","huawei/ar510 firmware","huawei/dp300 firmware","huawei/netengine16ex firmware","huawei/rp200 firmware","huawei/srg1300 firmware","huawei/srg2300 firmware","huawei/srg3300 firmware","huawei/te30 firmware","huawei/te40 firmware","huawei/te50 firmware","huawei/te60 firmware","huawei/tp3106 firmware","huawei/tp3206 firmware","huawei/viewpoint 8660 firmware","huawei/viewpoint 9030 firmware"],"epss":{"score":0.00773,"percentile":0.55516,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.77%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-h323-en","tags":["Vendor Advisory"],"source":"psirt@huawei.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-h323-en","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-17151","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}