CVE-2017-15346: Huawei ECNS210 Td Firmware

Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days.

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,eCNS210_TD V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221, V100R004C10SPC400 has a DOS vulnerability. An attacker may craft specific XML files to the affected products. Due to not check the specially XML file and to parse this file, successful exploit will result in DOS attacks.

Affected products

Huawei ECNS210 Td Firmware: version v100r004c10 only; version v100r004c10spc003 only; version v100r004c10spc100 only; version v100r004c10spc101 only; version v100r004c10spc102 only; version v100r004c10spc200 only; …
Huawei s12700 Firmware: version v200r005c00 only
Huawei s1700 Firmware: version v200r009c00 only; version v200r010c00 only
Huawei s5700 Firmware: version v200r001c00 only; version v200r002c00 only; version v200r003c00 only; version v200r003c02 only; version v200r005c00 only; version v200r006c00 only; …
Huawei s6700 Firmware: version v200r001c00 only; version v200r002c00 only; version v200r003c00 only; version v200r005c00 only; version v200r005c02 only; version v200r008c00 only; …
Huawei s7700 Firmware: version v200r001c00 only; version v200r002c00 only; version v200r003c00 only; version v200r005c00 only; version v200r006c00 only; version v200r007c00 only; …
Huawei s9700 Firmware: version v200r001c00 only; version v200r002c00 only; version v200r003c00 only; version v200r005c00 only; version v200r006c00 only; version v200r007c00 only; …

Published 2018-02-15. Last modified 2026-06-17.