description: AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products. Due to the insufficient input validation, an unauthenticated, remote attacker may craft a malformed Stream Control Transmission Protocol (SCTP) packet and send it to the device, causing the device to read out of bounds and restart.
problem types: Input Validation
affected:
{
product: AR120-S
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR1200
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R006C13
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR1200-S
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR150
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR150-S
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR160
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R006C12
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR200
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR200-S
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR2200
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R006C13
status: affected, version: V200R006C16
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR2200-S
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR3200
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R006C11
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R007C02
status: affected, version: V200R008C00
status: affected, version: V200R008C10
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR510
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R006C12
status: affected, version: V200R006C13
status: affected, version: V200R006C15
status: affected, version: V200R006C16
status: affected, version: V200R006C17
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: SRG1300
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: SRG2300
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: SRG3300
vendor: Huawei Technologies Co., Ltd.
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
