← Vulnerability feed

Vulnerability record · CVE-2017-17308 · published 11 April 2018

CVE-2017-17308: Huawei dp300 firmware improper input validation vulnerability

Huawei · Dp300 Firmware

SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote attacker may send specially crafted packets to the affected products. Due to insufficient validation of packets, successful exploit may cause some services abnormal.

5.3 CVSS 3.0 Medium EPSS 2.1% · top 18.8% CWE-20 · Improper input validation
5.3CVSS 3.0 base score, v2 5.0
2.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
6Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote attacker may send specially crafted packets to the affected products. Due to insufficient validation of packets, successful exploit may cause some services abnormal.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

6 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180411-01-sccpx-en Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180411-01-sccpx-en Vendor Advisory

Track CVE-2017-17308 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-17301Huawei ar120-s firmware improper certificate validation vulnerabilityHuawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C0…EPSS 0.97%8.8CVE-2017-2722Huawei dp300 firmware improper input validation vulnerabilityDP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002…EPSS 1.2%7.8CVE-2017-17146Huawei dp300 firmware memory buffer overflow vulnerabilityHuawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML f…EPSS 0.57%7.5CVE-2019-19416Huawei ar120-s firmware improper input validation vulnerabilityThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by s…EPSS 0.88%7.5CVE-2019-19417Huawei ar120-s firmware improper input validation vulnerabilityThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by s…EPSS 0.88%7.5CVE-2019-19415Huawei ar120-s firmware improper input validation vulnerabilityThe SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by s…EPSS 0.88%7.5CVE-2020-1841Huawei cloudlink board firmware vulnerabilityHuawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions…EPSS 0.97%7.5CVE-2019-19413Huawei dbs3900 tdd lte firmware integer overflow vulnerabilityThere is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could expl…EPSS 0.96%

Source: NIST National Vulnerability Database (record CVE-2017-17308), CISA KEV, FIRST EPSS (scores of 2026-10-17). This page is refreshed as NVD updates the record.