CVE:CVE-2017-15346
CNNVD:CNNVD-201712-061
Huawei S12700等都是中国华为（Huawei）公司的一款企业级交换机产品。
多款Huawei产品中的XML解析器存在存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade huawei s12700_firmware to a higher version than v200r005c00,and avoid the version v200r005c00; Upgrade huawei s1700_firmware to a higher version than v200r009c00,v200r010c00,and avoid the version v200r009c00,v200r010c00; Upgrade huawei s5700_firmware to a higher version than v200r001c00,v200r002c00,v200r003c00,v200r003c02,v200r005c00,v200r006c00,v200r007c00,v200r008c00,v200r009c00,v200r010c00,and avoid the version v200r001c00,v200r002c00,v200r003c00,v200r003c02,v200r005c00,v200r006c00,v200r007c00,v200r008c00,v200r009c00,v200r010c00; Upgrade huawei s6700_firmware to a higher version than v200r001c00,v200r002c00,v200r003c00,v200r005c00,v200r005c02,v200r008c00,v200r009c00,v200r010c00,and avoid the version v200r001c00,v200r002c00,v200r003c00,v200r005c00,v200r005c02,v200r008c00,v200r009c00,v200r010c00; Upgrade huawei s7700_firmware to a higher version than v200r001c00,v200r002c00,v200r003c00,v200r005c00,v200r006c00,v200r007c00,v200r008c00,v200r009c00,v200r010c00,and avoid the version v200r001c00,v200r002c00,v200r003c00,v200r005c00,v200r006c00,v200r007c00,v200r008c00,v200r009c00,v200r010c00; Upgrade huawei s9700_firmware to a higher version than v200r001c00,v200r002c00,v200r003c00,v200r005c00,v200r006c00,v200r007c00,v200r008c00,v200r009c00,v200r010c00,and avoid the version v200r001c00,v200r002c00,v200r003c00,v200r005c00,v200r006c00,v200r007c00,v200r008c00,v200r009c00,v200r010c00; Upgrade huawei ecns210_td_firmware to a higher version than v100r004c10,v100r004c10spc003,v100r004c10spc100,v100r004c10spc101,v100r004c10spc102,v100r004c10spc200,v100r004c10spc221,v100r004c10spc400,and avoid the version v100r004c10,v100r004c10spc003,v100r004c10spc100,v100r004c10spc101,v100r004c10spc102,v100r004c10spc200,v100r004c10spc221,v100r004c10spc400