CVE-2017-17200: Huawei DP300 Firmware

Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days.

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the device read out of bounds and probably make a service unavailable.

Affected products

• Huawei DP300 Firmware: version v500r002c00 only
• Huawei RP200 Firmware: version v500r002c00 only; version v600r006c00 only
• Huawei TE30 Firmware: version v100r001c10 only; version v500r002c00 only; version v600r006c00 only
• Huawei TE40 Firmware: version v500r002c00 only; version v600r006c00 only
• Huawei TE50 Firmware: version v500r002c00 only; version v600r006c00 only
• Huawei TE60 Firmware: version v100r001c10 only; version v500r002c00 only; version v600r006c00 only

Published 2018-03-09. Last modified 2026-06-17.