CVE-2017-17166: Huawei DP300 Firmware

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, TP3206 V100R002C00, VP9660 V500R002C00, V500R002C10 have a resource exhaustion vulnerability. The software does not process certain field of H.323 message properly, a remote unauthenticated attacker could send crafted H.323 message to the device, successful exploit could cause certain service unavailable since the stack memory is exhausted.

Affected products

• Huawei DP300 Firmware: version v500r002c00 only
• Huawei Secospace USG6300 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only
• Huawei Secospace USG6500 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only
• Huawei Secospace USG6600 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only
• Huawei TP3206 Firmware: version v100r002c00 only
• Huawei VP9660 Firmware: version v500r002c00 only; version v500r002c10 only

Published 2018-02-15. Last modified 2026-06-17.