Vulnerability Database

317,107

Total vulnerabilities in the database

CVE-2017-15343

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker could send a crafted SCTP message to the device. Successful exploit could system reboot.

  • Published: Feb 15, 2018
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-15343
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
huawei / ar120-s_firmware 200r006c10 200r006c10.x
huawei / ar120-s_firmware 200r007c00 200r007c00.x
huawei / ar120-s_firmware 200r008c20 200r008c20.x
huawei / ar120-s_firmware 200r008c30 200r008c30.x
huawei / ar1200_firmware 200r007c01 200r007c01.x
huawei / ar1200_firmware 200r007c02 200r007c02.x
huawei / ar3200_firmware 200r006c11 200r006c11.x
huawei / ar3200_firmware 200r008c00 200r008c00.x
huawei / ar3200_firmware 200r008c10 200r008c10.x