Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Huawei DP300 and modules risk buffer overflow via SIP backup

CVE-2017-15334 · published 8 years ago
Summary

The SIP backup feature in several Huawei devices, including DP300, IPS, NGFW, and NIP series, can overflow memory when it receives a specially crafted message. This could let an attacker cause the device to crash or potentially take control. Update the firmware for the listed products as soon as a patch is available or disable the SIP backup function until then.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
huawei dp300_firmware v500r002c00
cpe:2.3:o:huawei:dp300_firmware:v500r002c00:*:*:*:*:*:*:*
huawei ips_module_firmware v100r001c10
v100r001c20
v100r001c30
v500r001c00
v500r001c20
v500r001c30
v500r001c50
cpe:2.3:o:huawei:ips_module_firmware:v100r001c10:*:*:*:*:*:*:*
huawei ngfw_module_firmware v100r001c10
v100r001c20
v100r001c30
v500r001c00
v500r001c20
v500r002c00
v500r002c10
cpe:2.3:o:huawei:ngfw_module_firmware:v100r001c10:*:*:*:*:*:*:*
huawei nip6300_firmware v500r001c00
v500r001c20
v500r001c30
v500r001c50
cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*
huawei nip6600_firmware v500r001c00
v500r001c20
v500r001c30
v500r001c50
cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*
huawei nip6800_firmware v500r001c50
cpe:2.3:o:huawei:nip6800_firmware:v500r001c50:*:*:*:*:*:*:*
huawei rp200_firmware v500r002c00
v600r006c0
cpe:2.3:o:huawei:rp200_firmware:v500r002c00:*:*:*:*:*:*:*
huawei svn5600_firmware v200r003c00
v200r003c10
cpe:2.3:o:huawei:svn5600_firmware:v200r003c00:*:*:*:*:*:*:*
huawei svn5800_firmware v200r003c00
v200r003c10
cpe:2.3:o:huawei:svn5800_firmware:v200r003c00:*:*:*:*:*:*:*
huawei svn5800-c_firmware v200r003c00
v200r003c10
cpe:2.3:o:huawei:svn5800-c_firmware:v200r003c00:*:*:*:*:*:*:*
huawei semg9811_firmware v300r001c01
cpe:2.3:o:huawei:semg9811_firmware:v300r001c01:*:*:*:*:*:*:*
huawei secospace_usg6300_firmware v100r001c10
v100r001c20
v100r001c30
v500r001c00
v500r001c20
v500r001c30
v500r001c50
cpe:2.3:o:huawei:secospace_usg6300_firmware:v100r001c10:*:*:*:*:*:*:*
huawei secospace_usg6500_firmware v100r001c10
v100r001c20
v100r001c30
v500r001c00
v500r001c20
v500r001c30
v500r001c50
cpe:2.3:o:huawei:secospace_usg6500_firmware:v100r001c10:*:*:*:*:*:*:*
huawei secospace_usg6600_firmware v100r001c00
v100r001c20
v100r001c30
v500r001c00
v500r001c20
v500r001c30
v500r001c50
cpe:2.3:o:huawei:secospace_usg6600_firmware:v100r001c00:*:*:*:*:*:*:*
huawei te30_firmware v100r001c02
v100r001c10
v500r002c00
v600r006c00
cpe:2.3:o:huawei:te30_firmware:v100r001c02:*:*:*:*:*:*:*
huawei te40_firmware v500r002c00
v600r006c00
cpe:2.3:o:huawei:te40_firmware:v500r002c00:*:*:*:*:*:*:*
huawei te50_firmware v500r002c00
v600r006c00
cpe:2.3:o:huawei:te50_firmware:v500r002c00:*:*:*:*:*:*:*
huawei te60_firmware v100r001c01
v100r001c10
v500r002c00
v600r006c00
cpe:2.3:o:huawei:te60_firmware:v100r001c01:*:*:*:*:*:*:*
huawei usg9500_firmware v500r001c00
v500r001c20
v500r001c30
cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:*:*:*:*:*:*:*
huawei usg9520_firmware v300r001c01
v300r001c20
cpe:2.3:o:huawei:usg9520_firmware:v300r001c01:*:*:*:*:*:*:*
huawei usg9560_firmware v300r001c01
v300r001c20
cpe:2.3:o:huawei:usg9560_firmware:v300r001c01:*:*:*:*:*:*:*
huawei usg9580_firmware v300r001c01
v300r001c20
cpe:2.3:o:huawei:usg9580_firmware:v300r001c01:*:*:*:*:*:*:*
huawei vp9660_firmware v200r001c02
v200r001c30
v500r002c00
v500r002c10
cpe:2.3:o:huawei:vp9660_firmware:v200r001c02:*:*:*:*:*:*:*
huawei viewpoint_8660_firmware v100r008c03
cpe:2.3:o:huawei:viewpoint_8660_firmware:v100r008c03:*:*:*:*:*:*:*
huawei viewpoint_9030_firmware v100r011c02
v100r011c03
cpe:2.3:o:huawei:viewpoint_9030_firmware:v100r011c02:*:*:*:*:*:*:*
huawei espace_u1981_firmware v100r001c20
v200r003c00
v200r003c20
v200r003c30
cpe:2.3:o:huawei:espace_u1981_firmware:v100r001c20:*:*:*:*:*:*:*
Original advisory text
The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R...
The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, USG9500 V500R001C00, V500R001C20, V500R001C30, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eSpace U1981 V100R001C20, V200R003C00, V200R003C20, V200R003C30 has a buffer overflow vulnerability. An attacker may send specially crafted messages to the affected products. Due to the insufficient validation of some values for SIP messages, successful exploit may cause services abnormal.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published15 Feb 2018
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-15334 · NVD
Track software like this
Free during beta