CVEvulnerability

CVE-2017-17156

7.5 HIGH Published 2018-02-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-02-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has an out-of-bounds memory access vulnerability due to insufficient input validation. An attacker could exploit it to craft special packets to trigger out-of-bounds memory access, which may further lead to system exceptions.

Affected configurations

• huawei ips module firmware v500r001c00 • huawei ips module firmware v500r001c00spc200 • huawei ips module firmware v500r001c00spc300 • huawei ips module firmware v500r001c00spc500 • huawei ips module firmware v500r001c00sph303 • huawei ips module firmware v500r001c00sph508 • huawei ips module firmware v500r001c20 • huawei ips module firmware v500r001c20spc100 • huawei ips module firmware v500r001c20spc100pwe • huawei ips module firmware v500r001c20spc200 • huawei ips module firmware v500r001c20spc200b062 • huawei ips module firmware v500r001c20spc200pwe • huawei ips module firmware v500r001c20spc300b078 • huawei ips module firmware v500r001c20spc300pwe • huawei ngfw module firmware v500r001c00 • huawei ngfw module firmware v500r001c00spc200 • huawei ngfw module firmware v500r001c00spc300 • huawei ngfw module firmware v500r001c00spc500 • huawei ngfw module firmware v500r001c00spc500pwe • huawei ngfw module firmware v500r001c00sph303 • huawei ngfw module firmware v500r001c00sph508 • huawei ngfw module firmware v500r001c20 • huawei ngfw module firmware v500r001c20spc100 • huawei ngfw module firmware v500r001c20spc100pwe • huawei ngfw module firmware v500r001c20spc200 • huawei ngfw module firmware v500r001c20spc200b062 • huawei ngfw module firmware v500r001c20spc200pwe • huawei ngfw module firmware v500r001c20spc300b078 • huawei ngfw module firmware v500r001c20spc300pwe • huawei nip6300 firmware v500r001c00 • huawei nip6300 firmware v500r001c00spc200 • huawei nip6300 firmware v500r001c00spc300 • huawei nip6300 firmware v500r001c00spc500 • huawei nip6300 firmware v500r001c00sph303 • huawei nip6300 firmware v500r001c00sph508 • huawei nip6300 firmware v500r001c20 • huawei nip6300 firmware v500r001c20spc100 • huawei nip6300 firmware v500r001c20spc100pwe • huawei nip6300 firmware v500r001c20spc200 • huawei nip6300 firmware v500r001c20spc200b062 • huawei nip6300 firmware v500r001c20spc200pwe • huawei nip6300 firmware v500r001c20spc300b078 • huawei nip6300 firmware v500r001c20spc300pwe • huawei nip6600 firmware v500r001c00 • huawei nip6600 firmware v500r001c00spc200 • huawei nip6600 firmware v500r001c00spc300 • huawei nip6600 firmware v500r001c00spc500 • huawei nip6600 firmware v500r001c00sph303 • huawei nip6600 firmware v500r001c00sph508 • huawei nip6600 firmware v500r001c20 • huawei nip6600 firmware v500r001c20spc100 • huawei nip6600 firmware v500r001c20spc100pwe • huawei nip6600 firmware v500r001c20spc200 • huawei nip6600 firmware v500r001c20spc200b062 • huawei nip6600 firmware v500r001c20spc200pwe • huawei nip6600 firmware v500r001c20spc300b078 • huawei secospace usg6300 firmware v500r001c00 • huawei secospace usg6300 firmware v500r001c00spc200 • huawei secospace usg6300 firmware v500r001c00spc300 • huawei secospace usg6300 firmware v500r001c00spc500 … and 62 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References