How should we interpret CVSS severity scores?

CVSS estimates technical severity, but it does not automatically equal business risk. Prioritize using context like internet exposure, asset criticality, known exploitation, and whether compensating controls exist. A Medium CVSS on an exposed production system can be more urgent than a Critical on an isolated non-production host.

Vulnerability Database

Q: What is a Vulnerability (CVE) and why does it matter?

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

Q: What's the difference between a vulnerability, an exploit, and a zero-day?

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. Risk increases sharply when exploitation becomes reliable or widespread.

Q: Why do vulnerabilities keep reappearing in our environment?

Recurring findings usually come from incomplete asset discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host.

Q: How do we prioritize remediation without burning out the team?

Use a repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress so remediation is steady, not reactive.

Q: How can SynScan help reduce vulnerability risk over time?

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.

328,409

Total vulnerabilities in the database

CVE-2017-8147

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 5800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 6800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 7800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 8800 with software V100R006C00, V200R001C00,E600 V200R008C00,S12700 with software V200R005C00, V200R006C00, V200R007C00, V200R008C00,S1700 with software V100R006C00, V100R007C00, V200R006C00,S2300 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S2700 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S5300 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S5700 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S6300 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R008C00,S6700 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S7700 with software V100R003C00, V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S9300 with software V100R001C00, V100R002C00, V100R003C00, V100R006C00, V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R008C10,S9700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,Secospace USG6600 V500R001C00SPC050 have a MaxAge LSA vulnerability due to improper OSPF implementation. When the device receives special LSA packets, the LS (Link Status) age would be set to MaxAge, 3600 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack.

Published: Nov 22, 2017
Updated: Nov 9, 2025
CVE: CVE-2017-8147
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
huawei / ac6005_firmware	200r006c10spc200	200r006c10spc200.x
huawei / ac6605_firmware	200r006c10spc200	200r006c10spc200.x
huawei / ar1200_firmware	200r005c10cp0582t	200r005c10cp0582t.x
huawei / ar1200_firmware	200r005c10hp0581t	200r005c10hp0581t.x
huawei / ar1200_firmware	200r005c20spc026t	200r005c20spc026t.x
huawei / ar200_firmware	200r005c20spc026t	200r005c20spc026t.x
huawei / ar3200_firmware	200r005c20spc026t	200r005c20spc026t.x
huawei / cloudengine_12800_firmware	100r003c00	100r003c00.x
huawei / cloudengine_12800_firmware	100r005c00	100r005c00.x
huawei / cloudengine_12800_firmware	100r005c10	100r005c10.x
huawei / cloudengine_12800_firmware	100r006c00	100r006c00.x
huawei / cloudengine_12800_firmware	200r001c00	200r001c00.x
huawei / cloudengine_5800_firmware	100r003c00	100r003c00.x
huawei / cloudengine_5800_firmware	100r005c00	100r005c00.x
huawei / cloudengine_5800_firmware	100r005c10	100r005c10.x
huawei / cloudengine_5800_firmware	100r006c00	100r006c00.x
huawei / cloudengine_5800_firmware	200r001c00	200r001c00.x
huawei / cloudengine_6800_firmware	100r003c00	100r003c00.x
huawei / cloudengine_6800_firmware	100r005c00	100r005c00.x
huawei / cloudengine_6800_firmware	100r005c10	100r005c10.x
huawei / cloudengine_6800_firmware	100r006c00	100r006c00.x
huawei / cloudengine_6800_firmware	200r001c00	200r001c00.x
huawei / cloudengine_7800_firmware	100r003c00	100r003c00.x
huawei / cloudengine_7800_firmware	100r005c00	100r005c00.x
huawei / cloudengine_7800_firmware	100r005c10	100r005c10.x
huawei / cloudengine_7800_firmware	100r006c00	100r006c00.x
huawei / cloudengine_7800_firmware	200r001c00	200r001c00.x
huawei / cloudengine_8800_firmware	100r006c00	100r006c00.x
huawei / cloudengine_8800_firmware	200r001c00	200r001c00.x
huawei / e600_firmware	200r008c00	200r008c00.x
huawei / s12700_firmware	200r005c00	200r005c00.x
huawei / s12700_firmware	200r006c00	200r006c00.x
huawei / s12700_firmware	200r007c00	200r007c00.x
huawei / s12700_firmware	200r008c00	200r008c00.x
huawei / s1700_firmware	100r006c00	100r006c00.x
huawei / s1700_firmware	100r007c00	100r007c00.x
huawei / s1700_firmware	200r006c00	200r006c00.x
huawei / s2300_firmware	100r005c00	100r005c00.x
huawei / s2300_firmware	100r006c00	100r006c00.x
huawei / s2300_firmware	100r006c03	100r006c03.x
huawei / s2300_firmware	100r006c05	100r006c05.x
huawei / s2300_firmware	200r003c00	200r003c00.x
huawei / s2300_firmware	200r003c02	200r003c02.x
huawei / s2300_firmware	200r003c10	200r003c10.x
huawei / s2300_firmware	200r005c00	200r005c00.x
huawei / s2300_firmware	200r005c01	200r005c01.x
huawei / s2300_firmware	200r005c02	200r005c02.x
huawei / s2300_firmware	200r005c03	200r005c03.x
huawei / s2300_firmware	200r006c00	200r006c00.x
huawei / s2300_firmware	200r007c00	200r007c00.x
huawei / s2300_firmware	200r008c00	200r008c00.x
huawei / s2700_firmware	100r005c00	100r005c00.x
huawei / s2700_firmware	100r006c00	100r006c00.x
huawei / s2700_firmware	100r006c03	100r006c03.x
huawei / s2700_firmware	100r006c05	100r006c05.x
huawei / s2700_firmware	200r003c00	200r003c00.x
huawei / s2700_firmware	200r003c02	200r003c02.x
huawei / s2700_firmware	200r003c10	200r003c10.x
huawei / s2700_firmware	200r005c00	200r005c00.x
huawei / s2700_firmware	200r005c01	200r005c01.x
huawei / s2700_firmware	200r005c02	200r005c02.x
huawei / s2700_firmware	200r005c03	200r005c03.x
huawei / s2700_firmware	200r006c00	200r006c00.x
huawei / s2700_firmware	200r007c00	200r007c00.x
huawei / s2700_firmware	200r008c00	200r008c00.x
huawei / s5300_firmware	100r005c00	100r005c00.x
huawei / s5300_firmware	100r006c00	100r006c00.x
huawei / s5300_firmware	100r006c01	100r006c01.x
huawei / s5300_firmware	200r001c00	200r001c00.x
huawei / s5300_firmware	200r001c01	200r001c01.x
huawei / s5300_firmware	200r002c00	200r002c00.x
huawei / s5300_firmware	200r003c00	200r003c00.x
huawei / s5300_firmware	200r003c02	200r003c02.x
huawei / s5300_firmware	200r003c10	200r003c10.x
huawei / s5300_firmware	200r005c00	200r005c00.x
huawei / s5300_firmware	200r006c00	200r006c00.x
huawei / s5300_firmware	200r007c00	200r007c00.x
huawei / s5300_firmware	200r008c00	200r008c00.x
huawei / s5700_firmware	100r005c00	100r005c00.x
huawei / s5700_firmware	100r006c00	100r006c00.x
huawei / s5700_firmware	100r006c01	100r006c01.x
huawei / s5700_firmware	200r001c00	200r001c00.x
huawei / s5700_firmware	200r001c01	200r001c01.x
huawei / s5700_firmware	200r002c00	200r002c00.x
huawei / s5700_firmware	200r003c00	200r003c00.x
huawei / s5700_firmware	200r003c02	200r003c02.x
huawei / s5700_firmware	200r003c10	200r003c10.x
huawei / s5700_firmware	200r005c00	200r005c00.x
huawei / s5700_firmware	200r006c00	200r006c00.x
huawei / s5700_firmware	200r007c00	200r007c00.x
huawei / s5700_firmware	200r008c00	200r008c00.x
huawei / s6300_firmware	100r006c00	100r006c00.x
huawei / s6300_firmware	200r001c00	200r001c00.x
huawei / s6300_firmware	200r001c01	200r001c01.x
huawei / s6300_firmware	200r002c00	200r002c00.x
huawei / s6300_firmware	200r003c00	200r003c00.x
huawei / s6300_firmware	200r003c02	200r003c02.x
huawei / s6300_firmware	200r003c10	200r003c10.x
huawei / s6300_firmware	200r005c00	200r005c00.x
huawei / s6300_firmware	200r008c00	200r008c00.x
huawei / s6700_firmware	100r006c00	100r006c00.x
huawei / s6700_firmware	200r001c00	200r001c00.x
huawei / s6700_firmware	200r001c01	200r001c01.x
huawei / s6700_firmware	200r002c00	200r002c00.x
huawei / s6700_firmware	200r003c00	200r003c00.x
huawei / s6700_firmware	200r003c02	200r003c02.x
huawei / s6700_firmware	200r003c10	200r003c10.x
huawei / s6700_firmware	200r005c00	200r005c00.x
huawei / s6700_firmware	200r006c00	200r006c00.x
huawei / s6700_firmware	200r007c00	200r007c00.x
huawei / s6700_firmware	200r008c00	200r008c00.x
huawei / s7700_firmware	100r003c00	100r003c00.x
huawei / s7700_firmware	100r006c00	100r006c00.x
huawei / s7700_firmware	200r001c00	200r001c00.x
huawei / s7700_firmware	200r001c01	200r001c01.x
huawei / s7700_firmware	200r002c00	200r002c00.x
huawei / s7700_firmware	200r003c00	200r003c00.x
huawei / s7700_firmware	200r005c00	200r005c00.x
huawei / s7700_firmware	200r006c00	200r006c00.x
huawei / s7700_firmware	200r007c00	200r007c00.x
huawei / s7700_firmware	200r008c00	200r008c00.x
huawei / s9300_firmware	100r001c00	100r001c00.x
huawei / s9300_firmware	100r002c00	100r002c00.x
huawei / s9300_firmware	100r003c00	100r003c00.x
huawei / s9300_firmware	100r006c00	100r006c00.x
huawei / s9300_firmware	200r001c00	200r001c00.x
huawei / s9300_firmware	200r002c00	200r002c00.x
huawei / s9300_firmware	200r003c00	200r003c00.x
huawei / s9300_firmware	200r005c00	200r005c00.x
huawei / s9300_firmware	200r006c00	200r006c00.x
huawei / s9300_firmware	200r007c00	200r007c00.x
huawei / s9300_firmware	200r008c00	200r008c00.x
huawei / s9300_firmware	200r008c10	200r008c10.x
huawei / s9700_firmware	200r001c00	200r001c00.x
huawei / s9700_firmware	200r002c00	200r002c00.x
huawei / s9700_firmware	200r003c00	200r003c00.x
huawei / s9700_firmware	200r005c00	200r005c00.x
huawei / s9700_firmware	200r006c00	200r006c00.x
huawei / s9700_firmware	200r007c00	200r007c00.x
huawei / s9700_firmware	200r008c00	200r008c00.x
huawei / secospace_usg6600_firmware	500r001c00	500r001c00.x
huawei / secospace_usg6600_firmware	500r001c20	500r001c20.x
huawei / secospace_usg6600_firmware	500r001c30	500r001c30.x

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170720-01-ospf-en

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo

Frequently Asked Questions

What is a Vulnerability (CVE) and why does it matter?

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

CVSS (Common Vulnerability Scoring System) estimates technical severity, but it doesn't automatically equal business risk. Prioritize using context like internet exposure, affected asset criticality, known exploitation (proof-of-concept or in-the-wild), and whether compensating controls exist. A "Medium" CVSS on an exposed, production system can be more urgent than a "Critical" on an isolated, non-production host.

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. In practice, risk increases sharply when exploitation becomes reliable or widespread.

Recurring findings usually come from incomplete Asset Discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host. Unknown or unmanaged assets (often called Shadow IT) are a common reason the same issues resurface.

Use a simple, repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress using consistent metrics so remediation is steady, not reactive.

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.