Low severity3.3NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026
CVE-2017-17330
CVE-2017-17330
Description
Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML element data. An authenticated attacker could upload a crafted XML file, successful exploit could cause the system service abnormal since run out of memory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r007c01:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r007c02:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c10:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ar3200_firmware:v200r008c30:*:*:*:*:*:*:*
cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*
- Range: V500R001C00; V500R001C20; V500R002C00
- Huawei Technologies Co., Ltd./AR3200; NGFW Modulev5Range: AR3200 V200R005C32
Patches
Vulnerability mechanics
References
1- www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-04-xml-ennvdVendor Advisory
News mentions
0No linked articles in our index yet.