← Back

CVE-2017-17312

nvd nist
Published: Aug 21, 2018Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent crafted packets to the affected device to exploit these vulnerabilities. Successful exploit the vulnerability could lead to device deny of service.

Affected (4)

Huawei
4 products
Usg2205bsr Firmware
Usg2220bsr Firmware
Usg5120bsr Firmware
Usg5150bsr Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Usg2205bsr Firmware
Version v300r001c10spc600
Running on/withPlatform Versions
Huawei
Usg2205bsr
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Usg2220bsr Firmware
Version v300r001c00
Running on/withPlatform Versions
Huawei
Usg2220bsr
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Usg5120bsr Firmware
Version v300r001c00
Running on/withPlatform Versions
Huawei
Usg5120bsr
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Usg5150bsr Firmware
Version v300r001c00
Running on/withPlatform Versions
Huawei
Usg5150bsr
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.