Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-17290

The Light Directory Access Protocol (LDAP) clients of Huawei TE60 with software V600R006C00, ViewPoint 9030 with software V100R011C02, V100R011C03 have a resource management errors vulnerability. An unauthenticated, remote attacker may make the LDAP server not respond to the client's request by controlling the LDAP server. Due to improper management of LDAP connection resource, a successful exploit may cause the connection resource exhausted of the LDAP client.

Published

2018-02-15T16:29:03.063

Last Modified

2024-11-21T03:17:45.730

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-400
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei te60_firmware v600r006c00 Yes
Hardware huawei te60 - No
Operating System huawei viewpoint_9030_firmware v100r011c02 Yes
Operating System huawei viewpoint_9030_firmware v100r011c03 Yes
Hardware huawei viewpoint_9030 - No
References