Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qmxm-gf38-hm47

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could system reboot.

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could system reboot.

EPSS

Процентиль: 50%
0.00268
Низкий

7.5 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.5
nvd
почти 8 лет назад

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could system reboot.

CVSS3: 7.5
fstec
около 8 лет назад

Уязвимость механизма проверки SCTP-сообщений микропрограммного обеспечения маршрутизаторов Huawei AR3200, Huawei AR1200 и Huawei AR120-S, позволяющая нарушителю вызвать перезагрузку системы

EPSS

Процентиль: 50%
0.00268
Низкий

7.5 High

CVSS3

Дефекты

CWE-190