CVE-2018-7920
HIGHHuawei AR1200, AR160, AR200, AR2200, AR3200 V200R006C10SPC300 - Denial of Service via TCP Message Flood
Title source: llmDescription
Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200R006C10SPC300 devices have an improper resource management vulnerability. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the management interface of the affected device to exploit this vulnerability. Successful exploit could exhaust the socket resource of management interface, leading to a DoS condition.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-ar-en
Scores
CVSS v3
7.5
EPSS
0.0028
EPSS Percentile
51.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-400
Status
published
Products (5)
huawei/ar1200_firmware
v200r006c10spc300
huawei/ar160_firmware
v200r006c10spc300
huawei/ar200_firmware
v200r006c10spc300
huawei/ar2200_firmware
v200r006c10spc300
huawei/ar3200_firmware
v200r006c10spc300
Published
Apr 19, 2018
Tracked Since
Feb 18, 2026