CVE-2017-17255 : What You Need to Know

Huawei products are vulnerable to a null pointer dereference issue in the H323 protocol.

Understanding CVE-2017-17255

What is CVE-2017-17255?

The vulnerability affects various Huawei products due to insufficient validation of packets in the H323 protocol, allowing for a null pointer dereference.

The Impact of CVE-2017-17255

Exploiting this vulnerability can lead to a process crash by sending specially crafted packets to the affected devices.

Technical Details of CVE-2017-17255

Vulnerability Description

Vulnerability Type: Null Pointer Dereference
Exploitation: Crafting and sending malformed packets to trigger the issue

Affected Systems and Versions

Products: AR120-S, AR1200, AR150, AR160, AR200, AR2200, AR3200, AR3600, AR510, DP300, IPS Module, NGFW Module, NIP6300, NIP6600, NIP6800, NetEngine16EX, RSE6500, SRG1300, SRG2300, SRG3300, SVN5600, SVN5800, SVN5800-C, SeMG9811, Secospace USG6300, Secospace USG6500, Secospace USG6600, TE30, TE40, TE50, TE60, TP3106, TP3206, USG6000V, USG9500, USG9520, USG9560, USG9580, VP9660, ViewPoint 8660, ViewPoint 9030
Versions: Detailed list provided in the data

Exploitation Mechanism

Crafting and sending specially crafted packets to exploit the vulnerability

Mitigation and Prevention

Immediate Steps to Take

Apply patches provided by Huawei to address the vulnerability
Implement network segmentation to limit exposure

Long-Term Security Practices

Regularly update and patch all software and firmware
Conduct security assessments and penetration testing

Patching and Updates

Check Huawei's security advisories for specific patches and updates