← Vulnerability feed

Vulnerability record · CVE-2017-15349 · published 15 February 2018

CVE-2017-15349: Huawei cloudengine 12800 firmware vulnerability

Huawei · Cloudengine 12800 Firmware

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Resource ReServation Protocol (RSVP) packets to the affected products. Due to not release the memory to handle the packets, successful exploit will result in memory leak of the affected products and lead to a DoS condition.

7.5 CVSS 3.0 High EPSS 0.95% · top 39.5% CWE-772 · CWE-772
7.5CVSS 3.0 base score, v2 5.0
0.95%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Resource ReServation Protocol (RSVP) packets to the affected products. Due to not release the memory to handle the packets, successful exploit will result in memory leak of the affected products and lead to a DoS condition.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-router-en Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-router-en Vendor Advisory

Track CVE-2017-15349 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-17301Huawei ar120-s firmware improper certificate validation vulnerabilityHuawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C0…EPSS 0.97%9.8CVE-2016-6178Huawei ne5000e firmware improper input validation vulnerabilityHuawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with s…EPSS 3.0%7.8CVE-2021-39976Huawei cloudengine 5800 firmware vulnerabilityThere is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated local at…EPSS 0.18%7.8CVE-2020-9207Huawei cloudengine 12800 firmware improper authentication vulnerabilityThere is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. A…EPSS 0.57%7.5CVE-2021-40008Huawei cloudengine 7800 firmware vulnerabilityThere is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 a…EPSS 0.68%7.5CVE-2021-22328Huawei cloudengine 12800 firmware vulnerabilityThere is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker m…EPSS 0.68%7.5CVE-2021-22332Huawei cloudengine 12800 firmware double free vulnerabilityThere is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a f…EPSS 0.68%7.5CVE-2021-22393Huawei cloudengine 12800 firmware vulnerabilityThere is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affect…EPSS 0.68%

Source: NIST National Vulnerability Database (record CVE-2017-15349), CISA KEV, FIRST EPSS (scores of 2026-10-18). This page is refreshed as NVD updates the record.