← Vulnerability feed

Vulnerability record · CVE-2017-17131 · published 5 March 2018

CVE-2017-17131: Huawei dp300 firmware vulnerability

Huawei · Dp300 Firmware

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated remote attacker can place a malformed putty key file in system when a system manager load the key an infinite loop happens which lead to reboot the system.

5.7 CVSS 3.0 Medium EPSS 0.83% · top 43.4% CWE-835 · CWE-835
5.7CVSS 3.0 base score, v2 6.3
0.83%EPSS exploitation probability, 30 days
NoNot in CISA KEV
6Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated remote attacker can place a malformed putty key file in system when a system manager load the key an infinite loop happens which lead to reboot the system.

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Affected products

6 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-vpp-en Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171206-01-vpp-en Vendor Advisory

Track CVE-2017-17131 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-17301Huawei ar120-s firmware improper certificate validation vulnerabilityHuawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C0…EPSS 0.97%8.8CVE-2017-2722Huawei dp300 firmware improper input validation vulnerabilityDP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002…EPSS 1.2%7.8CVE-2017-17146Huawei dp300 firmware memory buffer overflow vulnerabilityHuawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML f…EPSS 0.57%7.5CVE-2019-19417Huawei ar120-s firmware improper input validation vulnerabilityThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by s…EPSS 0.88%7.5CVE-2019-19415Huawei ar120-s firmware improper input validation vulnerabilityThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by s…EPSS 0.88%7.5CVE-2019-19416Huawei ar120-s firmware improper input validation vulnerabilityThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by s…EPSS 0.88%7.5CVE-2020-1841Huawei cloudlink board firmware vulnerabilityHuawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions…EPSS 0.97%7.5CVE-2019-19414Huawei dbs3900 tdd lte firmware integer overflow vulnerabilityThere is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could expl…EPSS 0.96%

Source: NIST National Vulnerability Database (record CVE-2017-17131), CISA KEV, FIRST EPSS (scores of 2026-10-17). This page is refreshed as NVD updates the record.