CVE-2017-17185
Description
Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a out-of-bounds read vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make the device access invalid memory and might reset a process.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
An authenticated remote attacker can cause a denial of service via out-of-bounds read by sending malformed SOAP packets to affected Huawei products.
Vulnerability
An out-of-bounds read vulnerability exists in several Huawei products due to insufficient input validation of SOAP packets. Affected models and versions include: DP300 V500R002C00, RP200 V500R002C00 and V600R006C00, TE30 V100R001C10, V500R002C00, and V600R006C00, TE40 V500R002C00 and V600R006C00, TE50 V500R002C00 and V600R006C00, TE60 V100R001C10, V500R002C00, and V600R006C00 [1].
Exploitation
An attacker must first authenticate to the target device. Once authenticated, the attacker can send specially crafted malformed SOAP packets over the network to trigger the out-of-bounds read [1].
Impact
Successful exploitation causes the device to access invalid memory, which may reset a process, leading to a denial of service (DoS). No data disclosure or code execution is indicated for this specific vulnerability [1].
Mitigation
Huawei has released software updates to fix this vulnerability. Affected users should consult the official security advisory [1] for the specific fixed versions and apply the updates as soon as possible.
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
4- Huawei Technologies Co., Ltd./DP300,RP200,TE30,TE40,TE50,TE60v5Range: DP300 V500R002C00, RP200 V500R002C00,V600R006C00, TE30 V100R001C10,V500R002C00,V600R006C00, TE40 V500R002C00,V600R006C00, TE50 V500R002C00,V600R006C00, TE60 V100R001C10,V500R002C00,V600R006C00
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-enmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.