Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE50 V600R006C00, TE60 V600R006C00 have a denial of service vulnerability. The software decodes X.509 certificate in an improper way. A remote unauthenticated attacker could send a crafted X.509 certificate to the device. Successful exploit could result in a denial of service on the device.
The product does not validate, or incorrectly validates, a certificate.
Link | Tags |
---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-cert-en | vendor advisory |