CVE-2017-15317 — AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products

Back Back to CVE browser

HIGH

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products

Published Dec 22, 2017

7.5

HIGH

CVSS 3.0

EPSS 1.31%

Description

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.

Affected products

Vendor Huawei Technologies Co., Ltd. Product AR120-S Default
n/a
- Version
  V200R006C10
  Status
  affected
  Constraints
  -
- Version
  V200R007C00
  Status
  affected
  Constraints
  -
- Version
  V200R008C20
  Status
  affected
  Constraints
  -
- Version
  V200R008C30
  Status
  affected
  Constraints
  -
Vendor Huawei Technologies Co., Ltd. Product AR150-S Default
n/a
- Version
  V200R006C10
  Status
  affected
  Constraints
  -
- Version
  V200R007C00
  Status
  affected
  Constraints
  -
- Version
  V200R008C20
  Status
  affected
  Constraints
  -
- Version
  V200R008C30
  Status
  affected
  Constraints
  -
Vendor Huawei Technologies Co., Ltd. Product AR200-S Default
n/a
- Version
  V200R006C10
  Status
  affected
  Constraints
  -
- Version
  V200R007C00
  Status
  affected
  Constraints
  -
- Version
  V200R008C20
  Status
  affected
  Constraints
  -
- Version
  V200R008C30
  Status
  affected
  Constraints
  -
Vendor Huawei Technologies Co., Ltd. Product n/a Default
n/a
- Version
  V200R006C10
  Status
  affected
  Constraints
  -
- Version
  V200R006C11
  Status
  affected
  Constraints
  -
- Version
  V200R006C12
  Status
  affected
  Constraints
  -
- Version
  V200R006C13
  Status
  affected
  Constraints
  -
- Version
  V200R006C15
  Status
  affected
  Constraints
  -
- Version
  V200R006C16
  Status
  affected
  Constraints
  -
- Version
  V200R006C17
  Status
  affected
  Constraints
  -
- Version
  V200R007C00
  Status
  affected
  Constraints
  -
- Version
  V200R007C01
  Status
  affected
  Constraints
  -
- Version
  V200R007C02
  Status
  affected
  Constraints
  -
- Version
  V200R008C00
  Status
  affected
  Constraints
  -
- Version
  V200R008C10
  Status
  affected
  Constraints
  -
- Version
  V200R008C20
  Status
  affected
  Constraints
  -
- Version
  V200R008C30
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei Technologies Co., Ltd.

AR120-S

n/a

Version	Status	Constraints
V200R006C10	affected	-
V200R007C00	affected	-
V200R008C20	affected	-
V200R008C30	affected	-

Huawei Technologies Co., Ltd.

AR150-S

n/a

Version	Status	Constraints
V200R006C10	affected	-
V200R007C00	affected	-
V200R008C20	affected	-
V200R008C30	affected	-

Huawei Technologies Co., Ltd.

AR200-S

n/a

Version	Status	Constraints
V200R006C10	affected	-
V200R007C00	affected	-
V200R008C20	affected	-
V200R008C30	affected	-

Huawei Technologies Co., Ltd.

n/a

Version	Status	Constraints
V200R006C10	affected	-
V200R006C11	affected	-
V200R006C12	affected	-
V200R006C13	affected	-
V200R006C15	affected	-
V200R006C16	affected	-
V200R006C17	affected	-
V200R007C00	affected	-
V200R007C01	affected	-
V200R007C02	affected	-
V200R008C00	affected	-
V200R008C10	affected	-
V200R008C20	affected	-
V200R008C30	affected	-

Remediation

No remediation recorded yet.

Metrics

1.31% 0.01314

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01314

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.31% (0.01314)	69.66th	v5 (v2026.06.15)
Sep 20, 2026	1.31% (0.01314)	69.43th	v5 (v2026.06.15)
Jul 20, 2024	0.21% (0.00209)	59.34th	v3 (v2023.03.01)
Sep 3, 2023	0.21% (0.00206)	57.89th	v3 (v2023.03.01)
Mar 7, 2023	0.15% (0.00146)	48.74th	v3 (v2023.03.01)
Mar 6, 2023	1.05% (0.01055)	52.13th	v2 (v2022.01.01)
Feb 4, 2022	1.05% (0.01055)	27.52th	v2 (v2022.01.01)
Feb 3, 2022	0.52% (0.00523)	12.55th	v5 (v2026.06.15)
Apr 14, 2021	0.52% (0.00523)	0.00th	v1

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (1)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-sctp-en		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Dec 22, 2017

Updated Sep 17, 2024

Reserved Oct 14, 2017

Link CVE-2017-15317

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-15317

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-15317