CVEvulnerability
CVE-2017-17138
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has a DoS vulnerability in PEM module of Huawei products due to insufficient verification. An authenticated local attacker can make processing into deadloop by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service.
Affected configurations
• huawei dp300 firmware v500r002c00
• huawei ips module firmware v500r001c00
• huawei ips module firmware v500r001c30
• huawei ngfw module firmware v500r001c00
• huawei ngfw module firmware v500r002c00
• huawei nip6300 firmware v500r001c00
• huawei nip6300 firmware v500r001c30
• huawei nip6600 firmware v500r001c00
• huawei nip6600 firmware v500r001c30
• huawei rp200 firmware v500r002c00
• huawei rp200 firmware v600r006c00
• huawei s12700 firmware v200r007c00
• huawei s12700 firmware v200r007c01
• huawei s12700 firmware v200r008c00
• huawei s12700 firmware v200r009c00
• huawei s12700 firmware v200r010c00
• huawei s1700 firmware v200r006c10
• huawei s1700 firmware v200r009c00
• huawei s1700 firmware v200r010c00
• huawei s2700 firmware v200r006c10
• huawei s2700 firmware v200r007c00
• huawei s2700 firmware v200r008c00
• huawei s2700 firmware v200r009c00
• huawei s2700 firmware v200r010c00
• huawei s5700 firmware v200r006c00
• huawei s5700 firmware v200r007c00
• huawei s5700 firmware v200r008c00
• huawei s5700 firmware v200r009c00
• huawei s5700 firmware v200r010c00
• huawei s6700 firmware v200r008c00
• huawei s6700 firmware v200r009c00
• huawei s6700 firmware v200r010c00
• huawei s7700 firmware v200r007c00
• huawei s7700 firmware v200r008c00
• huawei s7700 firmware v200r009c00
• huawei s7700 firmware v200r010c00
• huawei s9700 firmware v200r007c00
• huawei s9700 firmware v200r007c01
• huawei s9700 firmware v200r008c00
• huawei s9700 firmware v200r009c00
• huawei s9700 firmware v200r010c00
• huawei secospace usg6300 firmware v500r001c00
• huawei secospace usg6300 firmware v500r001c30
• huawei secospace usg6500 firmware v500r001c00
• huawei secospace usg6500 firmware v500r001c30
• huawei secospace usg6600 firmware v500r001c00
• huawei secospace usg6600 firmware v500r001c30s
• huawei te30 firmware v100r001c02
• huawei te30 firmware v100r001c10
• huawei te30 firmware v500r002c00
• huawei te30 firmware v600r006c00
• huawei te40 firmware v500r002c00
• huawei te40 firmware v600r006c00
• huawei te50 firmware v500r002c00
• huawei te50 firmware v600r006c00
• huawei te60 firmware v100r001c02
• huawei te60 firmware v100r001c10
• huawei te60 firmware v500r002c00
• huawei te60 firmware v600r006c00
• huawei tp3106 firmware v100r002c00
… and 6 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness