CVE-2017-17202 describes an out-of-bounds read vulnerability in multiple Huawei AR series routers and NetEngine/SRG devices across various V200R versions. This flaw stems from insufficient input validation when processing Session Initiation Protocol (SIP) packets. The vulnerability carries a CVSSv3 score of 7.5 (High), indicating that an unauthenticated, remote attacker can exploit it with low attack complexity by sending specially crafted SIP packets. Successful exploitation could lead to a denial-of-service condition, rendering the affected device unavailable. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness or attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
v200r005c32CPE matchmatch criteria | cpe:2.3:o:huawei:ar120-s_firmware:v200r005c32:*:*:*:*:*:*:* | ||
v200r006c10CPE matchmatch criteria | cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:* | ||
v200r007c00CPE matchmatch criteria | cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:* | ||
v200r008c20CPE matchmatch criteria | cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:* | ||
v200r008c30CPE matchmatch criteria | cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.