CVE:CVE-2017-17294
CNNVD:CNNVD-201712-679
Huawei AR120-S等都是中国华为（Huawei）公司的路由器产品。
多款Huawei产品中存在安全漏洞，该漏洞源于程序没有充分的校验输入。本地攻击者可通过向受影响设备上传特制的XML文件利用该漏洞造成服务异常（空指针逆向引用）。以下产品和版本受到影响：Huawei AR120-S V200R006C10版本，V200R007C00版本，V200R008C20版本，V200R008C30版本；AR1200 V200R006C10版本，V200R006C13版本，V200R007C00版本，V200R007C01版本，V200R007C02版本，V200R008C20版本，V200R008C30版本；AR1200-S V200R006C10版本，V200R007C00版本，V200R008C20版本，V200R008C30版本；AR150等。
solution:Upgrade huawei ar120-s_firmware to a higher version than v200r006c10,v200r007c00,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r008c20,v200r008c30; Upgrade huawei ar1200_firmware to a higher version than v200r006c10,v200r006c13,v200r007c00,v200r007c01,v200r007c02,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r006c13,v200r007c00,v200r007c01,v200r007c02,v200r008c20,v200r008c30; Upgrade huawei ar1200-s_firmware to a higher version than v200r006c10,v200r007c00,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r008c20,v200r008c30; Upgrade huawei ar150_firmware to a higher version than v200r006c10,v200r007c00,v200r007c01,v200r007c02,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r007c01,v200r007c02,v200r008c20,v200r008c30; Upgrade huawei ar150-s_firmware to a higher version than v200r006c10,v200r007c00,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r008c20,v200r008c30; Upgrade huawei ar160_firmware to a higher version than v200r006c10,v200r006c12,v200r007c00,v200r007c01,v200r007c02,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r006c12,v200r007c00,v200r007c01,v200r007c02,v200r008c20,v200r008c30; Upgrade huawei ar200_firmware to a higher version than v200r006c10,v200r007c00,v200r007c01,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r007c01,v200r008c20,v200r008c30; Upgrade huawei ar200-s_firmware to a higher version than v200r006c10,v200r007c00,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r008c20,v200r008c30; Upgrade huawei ar2200_firmware to a higher version than v200r006c10,v200r006c13,v200r006c16,v200r007c00,v200r007c01,v200r007c02,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r006c13,v200r006c16,v200r007c00,v200r007c01,v200r007c02,v200r008c20,v200r008c30; Upgrade huawei ar2200-s_firmware to a higher version than v200r006c10,v200r007c00,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r008c20,v200r008c30; Upgrade huawei ar3200_firmware to a higher version than v200r006c10,v200r006c11,v200r007c00,v200r007c01,v200r007c02,v200r008c00,v200r008c10,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r006c11,v200r007c00,v200r007c01,v200r007c02,v200r008c00,v200r008c10,v200r008c20,v200r008c30; Upgrade huawei ar3600_firmware to a higher version than v200r006c10,v200r007c00,v200r007c01,v200r008c20,and avoid the version v200r006c10,v200r007c00,v200r007c01,v200r008c20; Upgrade huawei ar510_firmware to a higher version than v200r006c10,v200r006c12,v200r006c13,v200r006c15,v200r006c16,v200r006c17,v200r007c00,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r006c12,v200r006c13,v200r006c15,v200r006c16,v200r006c17,v200r007c00,v200r008c20,v200r008c30; Upgrade huawei dp300_firmware to a higher version than v500r002c00,and avoid the version v500r002c00; Upgrade huawei max_presence_firmware to a higher version than v100r001c00,and avoid the version v100r001c00; Upgrade huawei netengine16ex_firmware to a higher version than v200r006c10,v200r007c00,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r008c20,v200r008c30; Upgrade huawei rp200_firmware to a higher version than v500r002c00,v600r006c00,and avoid the version v500r002c00,v600r006c00; Upgrade huawei srg1300_firmware to a higher version than v200r006c10,v200r007c00,v200r007c02,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r007c02,v200r008c20,v200r008c30; Upgrade huawei srg2300_firmware to a higher version than v200r006c10,v200r007c00,v200r007c02,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r007c02,v200r008c20,v200r008c30; Upgrade huawei srg3300_firmware to a higher version than v200r006c10,v200r007c00,v200r008c20,v200r008c30,and avoid the version v200r006c10,v200r007c00,v200r008c20,v200r008c30; Upgrade huawei te30_firmware to a higher version than v100r001c02,v100r001c10,v500r002c00,v600r006c00,and avoid the version v100r001c02,v100r001c10,v500r002c00,v600r006c00; Upgrade huawei te40_firmware to a higher version than v500r002c00,v600r006c00,and avoid the version v500r002c00,v600r006c00; Upgrade huawei te50_firmware to a higher version than v500r002c00,v600r006c00,and avoid the version v500r002c00,v600r006c00; Upgrade huawei te60_firmware to a higher version than v100r001c01,v100r001c10,v500r002c00,v600r006c00,and avoid the version v100r001c01,v100r001c10,v500r002c00,v600r006c00; Upgrade huawei tp3106_firmware to a higher version than v100r002c00,and avoid the version v100r002c00; Upgrade huawei tp3206_firmware to a higher version than v100r002c00,v100r002c10,and avoid the version v100r002c00,v100r002c10