CVE-2017-15343

7.5 highEPSS 1.4%

High (7.5) in huawei. EPSS 1.4% chance of exploitation in the next 30 days.

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could system reboot.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2018-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:ar120-s_firmware
huawei:ar1200_firmware
huawei:ar3200_firmware

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-sctp-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-sctp-en

Check your stack JSON