Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Huawei AC6005/AC6605 and S2700 firmware enable remote takeover

CVE-2017-8147 · published 8 years ago
Summary

Certain versions of Huawei's AC6005, AC6605, AR1200, AR200, AR3200, and S2700 device firmware contain a flaw that could let an attacker gain control of the device over the network. This could expose your network to unauthorized changes or data loss. Update the firmware to the latest version provided by Huawei as soon as possible and verify that only trusted administrators have access to the devices.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
huawei s2700_firmware v200r007c00
v100r005c00
v100r006c00
v100r006c03
v100r006c05
v200r003c00
v200r003c02
v200r003c10
v200r005c00
v200r005c01
v200r005c02
v200r005c03
2 more version ranges
cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*
huawei ac6005_firmware v200r006c10spc200
cpe:2.3:o:huawei:ac6005_firmware:v200r006c10spc200:*:*:*:*:*:*:*
huawei ac6605_firmware v200r006c10spc200
cpe:2.3:o:huawei:ac6605_firmware:v200r006c10spc200:*:*:*:*:*:*:*
huawei ar1200_firmware v200r005c10cp0582t
v200r005c10hp0581t
v200r005c20spc026t
cpe:2.3:o:huawei:ar1200_firmware:v200r005c10cp0582t:*:*:*:*:*:*:*
huawei ar200_firmware v200r005c20spc026t
cpe:2.3:o:huawei:ar200_firmware:v200r005c20spc026t:*:*:*:*:*:*:*
huawei ar3200_firmware v200r005c20spc026t
cpe:2.3:o:huawei:ar3200_firmware:v200r005c20spc026t:*:*:*:*:*:*:*
huawei cloudengine_12800_firmware v100r003c00
v100r005c00
v100r005c10
v100r006c00
v200r001c00
cpe:2.3:o:huawei:cloudengine_12800_firmware:v100r003c00:*:*:*:*:*:*:*
huawei cloudengine_5800_firmware v100r003c00
v100r005c00
v100r005c10
v100r006c00
v200r001c00
cpe:2.3:o:huawei:cloudengine_5800_firmware:v100r003c00:*:*:*:*:*:*:*
huawei cloudengine_6800_firmware v100r003c00
v100r005c00
v100r005c10
v100r006c00
v200r001c00
cpe:2.3:o:huawei:cloudengine_6800_firmware:v100r003c00:*:*:*:*:*:*:*
huawei cloudengine_7800_firmware v100r003c00
v100r005c00
v100r005c10
v100r006c00
v200r001c00
cpe:2.3:o:huawei:cloudengine_7800_firmware:v100r003c00:*:*:*:*:*:*:*
huawei cloudengine_8800_firmware v100r006c00
v200r001c00
cpe:2.3:o:huawei:cloudengine_8800_firmware:v100r006c00:*:*:*:*:*:*:*
huawei e600_firmware v200r008c00
cpe:2.3:o:huawei:e600_firmware:v200r008c00:*:*:*:*:*:*:*
huawei s12700_firmware v200r005c00
v200r006c00
v200r007c00
v200r008c00
cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:*
huawei s1700_firmware v100r006c00
v100r007c00
v200r006c00
cpe:2.3:o:huawei:s1700_firmware:v100r006c00:*:*:*:*:*:*:*
huawei s2300_firmware v100r005c00
v100r006c00
v100r006c03
v100r006c05
v200r003c00
v200r003c02
v200r003c10
v200r005c00
v200r005c01
v200r005c02
v200r005c03
v200r006c00
2 more version ranges
cpe:2.3:o:huawei:s2300_firmware:v100r005c00:*:*:*:*:*:*:*
huawei s5300_firmware v100r005c00
v100r006c00
v100r006c01
v200r001c00
v200r001c01
v200r002c00
v200r003c00
v200r003c02
v200r003c10
v200r005c00
v200r006c00
v200r007c00
1 more version range
cpe:2.3:o:huawei:s5300_firmware:v100r005c00:*:*:*:*:*:*:*
huawei s5700_firmware v100r005c00
v100r006c00
v100r006c01
v200r001c00
v200r001c01
v200r002c00
v200r003c00
v200r003c02
v200r003c10
v200r005c00
v200r006c00
v200r007c00
1 more version range
cpe:2.3:o:huawei:s5700_firmware:v100r005c00:*:*:*:*:*:*:*
huawei s6300_firmware v100r006c00
v200r001c00
v200r001c01
v200r002c00
v200r003c00
v200r003c02
v200r003c10
v200r005c00
v200r008c00
cpe:2.3:o:huawei:s6300_firmware:v100r006c00:*:*:*:*:*:*:*
huawei s6700_firmware v100r006c00
v200r001c00
v200r001c01
v200r002c00
v200r003c00
v200r003c02
v200r003c10
v200r005c00
v200r006c00
v200r007c00
v200r008c00
cpe:2.3:o:huawei:s6700_firmware:v100r006c00:*:*:*:*:*:*:*
huawei s7700_firmware v100r003c00
v100r006c00
v200r001c00
v200r001c01
v200r002c00
v200r003c00
v200r005c00
v200r006c00
v200r007c00
v200r008c00
cpe:2.3:o:huawei:s7700_firmware:v100r003c00:*:*:*:*:*:*:*
huawei s9300_firmware v100r001c00
v100r002c00
v100r003c00
v100r006c00
v200r001c00
v200r002c00
v200r003c00
v200r005c00
v200r006c00
v200r007c00
v200r008c00
v200r008c10
cpe:2.3:o:huawei:s9300_firmware:v100r001c00:*:*:*:*:*:*:*
huawei s9700_firmware v200r001c00
v200r002c00
v200r003c00
v200r005c00
v200r006c00
v200r007c00
v200r008c00
cpe:2.3:o:huawei:s9700_firmware:v200r001c00:*:*:*:*:*:*:*
huawei secospace_usg6600_firmware v500r001c00
v500r001c20
v500r001c30
cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*
Original advisory text
AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,Cl...
AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 5800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 6800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 7800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 8800 with software V100R006C00, V200R001C00,E600 V200R008C00,S12700 with software V200R005C00, V200R006C00, V200R007C00, V200R008C00,S1700 with software V100R006C00, V100R007C00, V200R006C00,S2300 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S2700 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S5300 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S5700 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S6300 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R008C00,S6700 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S7700 with software V100R003C00, V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S9300 with software V100R001C00, V100R002C00, V100R003C00, V100R006C00, V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R008C10,S9700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,Secospace USG6600 V500R001C00SPC050 have a MaxAge LSA vulnerability due to improper OSPF implementation. When the device receives special LSA packets, the LS (Link Status) age would be set to MaxAge, 3600 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published22 Nov 2017
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-8147 · NVD
Track software like this
Free during beta