← Vulnerability feed

Vulnerability record · CVE-2017-17146 · published 9 March 2018

CVE-2017-17146: Huawei dp300 firmware memory buffer overflow vulnerability

Huawei · Dp300 Firmware

Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks or remote code execution on the device.

7.8 CVSS 3.0 High EPSS 0.57% · top 54.2% CWE-119 · Memory buffer overflow
7.8CVSS 3.0 base score, v2 7.2
0.57%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks or remote code execution on the device.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en Vendor Advisory

Track CVE-2017-17146 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-17301Huawei ar120-s firmware improper certificate validation vulnerabilityHuawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C0…EPSS 0.97%8.8CVE-2017-2722Huawei dp300 firmware improper input validation vulnerabilityDP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002…EPSS 1.2%7.5CVE-2019-19417Huawei ar120-s firmware improper input validation vulnerabilityThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by s…EPSS 0.88%7.5CVE-2019-19415Huawei ar120-s firmware improper input validation vulnerabilityThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by s…EPSS 0.88%7.5CVE-2019-19416Huawei ar120-s firmware improper input validation vulnerabilityThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by s…EPSS 0.88%7.5CVE-2020-1841Huawei cloudlink board firmware vulnerabilityHuawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions…EPSS 0.97%7.5CVE-2019-19413Huawei dbs3900 tdd lte firmware integer overflow vulnerabilityThere is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could expl…EPSS 0.96%7.5CVE-2019-19414Huawei dbs3900 tdd lte firmware integer overflow vulnerabilityThere is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could expl…EPSS 0.96%

Source: NIST National Vulnerability Database (record CVE-2017-17146), CISA KEV, FIRST EPSS (scores of 2026-10-16). This page is refreshed as NVD updates the record.