CVE-2017-15317: Huawei AR120-S Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.

Affected products

Huawei AR120-S Firmware: version v200r006c10 only; version v200r007c00 only; version v200r008c20 only; version v200r008c30 only
Huawei AR1200-S Firmware: version v200r006c10 only; version v200r007c00 only; version v200r008c20 only; version v200r008c30 only
Huawei AR1200 Firmware: version v200r006c10 only; version v200r006c13 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; version v200r008c20 only; …
Huawei AR150-S Firmware: version v200r006c10 only; version v200r007c00 only; version v200r008c20 only; version v200r008c30 only
Huawei AR150 Firmware: version v200r006c10 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; version v200r008c20 only; version v200r008c30 only
Huawei AR160 Firmware: version v200r006c10 only; version v200r006c12 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; version v200r008c20 only; …
Huawei AR200-S Firmware: version v200r006c10 only; version v200r007c00 only; version v200r008c20 only; version v200r008c30 only
Huawei AR200 Firmware: version v200r006c10 only; version v200r007c00 only; version v200r007c01 only; version v200r008c20 only; version v200r008c30 only
Huawei AR2200-S Firmware: version v200r006c10 only; version v200r007c00 only; version v200r008c20 only; version v200r008c30 only
Huawei AR2200 Firmware: version v200r006c10 only; version v200r006c13 only; version v200r006c16 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; …
Huawei AR3200 Firmware: version v200r006c10 only; version v200r006c11 only; version v200r007c00 only; version v200r007c01 only; version v200r007c02 only; version v200r008c00 only; …
Huawei AR510 Firmware: version v200r006c10 only; version v200r006c12 only; version v200r006c13 only; version v200r006c15 only; version v200r006c16 only; version v200r006c17 only; …
Huawei SRG1300 Firmware: version v200r006c10 only; version v200r007c00 only; version v200r007c02 only; version v200r008c20 only; version v200r008c30 only
Huawei SRG2300 Firmware: version v200r006c10 only; version v200r007c00 only; version v200r007c02 only; version v200r008c20 only; version v200r008c30 only
Huawei SRG3300 Firmware: version v200r006c10 only; version v200r007c00 only; version v200r008c20 only; version v200r008c30 only

Published 2017-12-22. Last modified 2026-06-17.