Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Huawei MAX Presence and TP3106/TP3206 may reboot

CVE-2017-8200 · published 8 years ago
Summary

The firmware for Huawei MAX Presence, TP3106 and TP3206 devices can be tricked into reading data beyond its limits when handling H.323 network traffic. An attacker who has a regular user account can send specially crafted packets that cause the affected process to restart, potentially interrupting service. Apply the vendor’s update or patch and limit network access to trusted users to mitigate the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
huawei max_presence_firmware v100r001c00
cpe:2.3:o:huawei:max_presence_firmware:v100r001c00:*:*:*:*:*:*:*
huawei tp3106_firmware v100r002c00
cpe:2.3:o:huawei:tp3106_firmware:v100r002c00:*:*:*:*:*:*:*
huawei tp3206_firmware v100r002c00
cpe:2.3:o:huawei:tp3206_firmware:v100r002c00:*:*:*:*:*:*:*
Original advisory text
MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to t...
MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Exploitation
1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published22 Nov 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-8200 · NVD
Track software like this
Free during beta