VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 15, 2018· Updated Aug 5, 2024

CVE-2017-15346

CVE-2017-15346

Description

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,eCNS210_TD V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221, V100R004C10SPC400 has a DOS vulnerability. An attacker may craft specific XML files to the affected products. Due to not check the specially XML file and to parse this file, successful exploit will result in DOS attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A DoS vulnerability in Huawei product XML parser allows crafted XML files to cause denial of service.

Vulnerability

The XML parser in multiple Huawei products, including S12700 V200R005C00, S1700 V200R009C00, V200R010C00, and many others, has a denial of service vulnerability. The parser fails to properly validate specially crafted XML files, leading to a crash or hang. Affected versions are listed in the advisory [1].

Exploitation

An attacker can exploit this vulnerability by sending a specially crafted XML file to the affected product. No authentication is required, and the attack can be launched remotely over the network.

Impact

Successful exploitation results in a denial of service, causing the product to become unresponsive or crash. This can disrupt normal operations.

Mitigation

Huawei has released software updates to fix these vulnerabilities. Customers should upgrade to the resolved versions specified in the advisory [1]. For example, S12700 should upgrade to V2R11C10. No workaround is available, but the patches address the issue.

References
  1. Security Advisory - Two DOS Vulnerabilities of XML Parser in Some Huawei Products

AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

4
  • Huawei/eCNS210_TDllm-create
    Range: V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221, V100R004C10SPC400
  • Huawei/S1700llm-fuzzy
    Range: V200R009C00, V200R010C00
  • Huawei/S12700llm-fuzzy
    Range: V200R005C00
  • Huawei Technologies Co., Ltd./S12700, S1700,S3700,S5700,S6700,S7700, S9700, eCNS210_TDv5
    Range: S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,eCNS210_TD V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221, V100R004C10SPC400,

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.