CVE-2017-8200

EPSS 1.1%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

22 nov 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.

Productos afectados

Huawei Technologies Co., Ltd. · MAX PRESENCE,TP3106,TP3206

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en http://www.securityfocus.com/bid/101948