CVE-2017-17131

Vulnerability

A denial-of-service (DoS) vulnerability exists in Huawei DP300 V500R002C00; RP200 V500R002C00 and V600R006C00; TE30 V100R001C10 and V600R006C00; TE50 V600R006C00; TE60 V100R001C10, V500R002C00, and V600R006C00; and VP9660 V500R002C10. The flaw occurs due to insufficient validation of a parameter when a Putty comment key is loaded. An authenticated remote attacker can place a malformed Putty key file on the system. When a system administrator loads this key, an infinite loop is triggered, causing the system to reboot [1].

Exploitation

An attacker must have authenticated remote access to the targeted device. The attacker places a specially crafted Putty key file containing a malformed comment field into the system. Exploitation requires a system manager to load the malicious key file. When the key is loaded, the insufficient input validation causes the software to enter an infinite loop, leading to a reboot [1].

Impact

Successful exploitation results in a denial-of-service condition. The system reboots, causing temporary unavailability of video conferencing services. The impact is limited to availability; no confidentiality or integrity compromise is reported. The attack is triggered only upon administrative action (loading the key) [1].

Mitigation

Huawei has released software updates to fix this vulnerability. Affected users should upgrade to the resolved versions: DP300 to V500R002C00SPCb00; RP200 V500R002C00 to V600R006C00SPC400; TE30 V100R001C10 to V600R006C00SPC400; TE60 V100R001C10 to V600R006C00SPC400; and VP9660 V500R002C10 to V500R002C10SPC900. Other product versions have corresponding patches as listed in the security advisory [1]. No workarounds are provided; applying the patches is the recommended mitigation.