CVE-2017-17147

5.5 mediumEPSS 0.2%

Medium (5.5) in huawei dp300 firmware. EPSS 0.2% chance of exploitation in the next 30 days.

Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2018-03-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:dp300_firmware

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en

Check your stack JSON