CVE-2017-15314: Huawei DP300 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE50 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability due to memory don't be released when the XML parser process some node fail. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.

Affected products

• Huawei DP300 Firmware: version v500r002c00 only
• Huawei RP200 Firmware: version v500r002c00spc200 only; version v600r006c00 only
• Huawei TE30 Firmware: version v100r001c10spc300 only; version v100r001c10spc500 only; version v100r001c10spc600 only; version v100r001c10spc700 only; version v500r002c00spc200 only; version v500r002c00spc500 only; …
• Huawei TE40 Firmware: version v500r002c00spc600 only; version v500r002c00spc700 only; version v500r002c00spc900 only; version v500r002c00spcb00 only; version v600r006c00 only
• Huawei TE50 Firmware: version v500r002c00spc600 only; version v500r002c00spc700 only; version v500r002c00spcb00 only; version v600r006c00 only
• Huawei TE60 Firmware: version v100r001c10 only; version v500r002c00 only; version v600r006c00 only

Published 2018-03-09. Last modified 2026-06-17.