high
7.5
CWE
787
Advisory Published
Updated

CVE-2017-17155

First published: Thu Feb 15 2018(Updated: )

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has an out-of-bounds memory access vulnerability due to incompliance with the 4-byte alignment requirement imposed by the MIPS CPU. An attacker could exploit it to cause unauthorized memory access, which may further lead to system exceptions.

Credit: psirt@huawei.com

Affected SoftwareAffected VersionHow to fix
Huawei IPS firmware=v500r001c00
Huawei IPS firmware=v500r001c00spc200
Huawei IPS firmware=v500r001c00spc300
Huawei IPS firmware=v500r001c00spc500
Huawei IPS firmware=v500r001c00sph303
Huawei IPS firmware=v500r001c00sph508
Huawei IPS firmware=v500r001c20
Huawei IPS firmware=v500r001c20spc100
Huawei IPS firmware=v500r001c20spc100pwe
Huawei IPS firmware=v500r001c20spc200
Huawei IPS firmware=v500r001c20spc200b062
Huawei IPS firmware=v500r001c20spc200pwe
Huawei IPS firmware=v500r001c20spc300b078
Huawei IPS firmware=v500r001c20spc300pwe
Huawei IPS Module firmware
Huawei NGFW Module firmware=v500r001c00
Huawei NGFW Module firmware=v500r001c00spc200
Huawei NGFW Module firmware=v500r001c00spc300
Huawei NGFW Module firmware=v500r001c00spc500
Huawei NGFW Module firmware=v500r001c00spc500pwe
Huawei NGFW Module firmware=v500r001c00sph303
Huawei NGFW Module firmware=v500r001c00sph508
Huawei NGFW Module firmware=v500r001c20
Huawei NGFW Module firmware=v500r001c20spc100
Huawei NGFW Module firmware=v500r001c20spc100pwe
Huawei NGFW Module firmware=v500r001c20spc200
Huawei NGFW Module firmware=v500r001c20spc200b062
Huawei NGFW Module firmware=v500r001c20spc200pwe
Huawei NGFW Module firmware=v500r001c20spc300b078
Huawei NGFW Module firmware=v500r001c20spc300pwe
Huawei NGFW Module
Huawei NIP6300 firmware=v500r001c00
Huawei NIP6300 firmware=v500r001c00spc200
Huawei NIP6300 firmware=v500r001c00spc300
Huawei NIP6300 firmware=v500r001c00spc500
Huawei NIP6300 firmware=v500r001c00sph303
Huawei NIP6300 firmware=v500r001c00sph508
Huawei NIP6300 firmware=v500r001c20
Huawei NIP6300 firmware=v500r001c20spc100
Huawei NIP6300 firmware=v500r001c20spc100pwe
Huawei NIP6300 firmware=v500r001c20spc200
Huawei NIP6300 firmware=v500r001c20spc200b062
Huawei NIP6300 firmware=v500r001c20spc200pwe
Huawei NIP6300 firmware=v500r001c20spc300b078
Huawei NIP6300 firmware=v500r001c20spc300pwe
Huawei NIP6300 firmware
Huawei NIP6600=v500r001c00
Huawei NIP6600=v500r001c00spc200
Huawei NIP6600=v500r001c00spc300
Huawei NIP6600=v500r001c00spc500
Huawei NIP6600=v500r001c00sph303
Huawei NIP6600=v500r001c00sph508
Huawei NIP6600=v500r001c20
Huawei NIP6600=v500r001c20spc100
Huawei NIP6600=v500r001c20spc100pwe
Huawei NIP6600=v500r001c20spc200
Huawei NIP6600=v500r001c20spc200b062
Huawei NIP6600=v500r001c20spc200pwe
Huawei NIP6600=v500r001c20spc300b078
Huawei NIP6600 firmware
Huawei USG6300E firmware=v500r001c00
Huawei USG6300E firmware=v500r001c00spc200
Huawei USG6300E firmware=v500r001c00spc300
Huawei USG6300E firmware=v500r001c00spc500
Huawei USG6300E firmware=v500r001c00spc500pwe
Huawei USG6300E firmware=v500r001c00sph303
Huawei USG6300E firmware=v500r001c00sph508
Huawei USG6300E firmware=v500r001c20
Huawei USG6300E firmware=v500r001c20spc100
Huawei USG6300E firmware=v500r001c20spc100pwe
Huawei USG6300E firmware=v500r001c20spc101
Huawei USG6300E firmware=v500r001c20spc200
Huawei USG6300E firmware=v500r001c20spc200b062
Huawei USG6300E firmware=v500r001c20spc200pwe
Huawei USG6300E firmware=v500r001c20spc300b078
Huawei USG6300E firmware=v500r001c20spc300pwe
Huawei Secospace USG6300 firmware
Huawei Secospace USG6500=v500r001c00
Huawei Secospace USG6500=v500r001c00spc200
Huawei Secospace USG6500=v500r001c00spc300
Huawei Secospace USG6500=v500r001c00spc500
Huawei Secospace USG6500=v500r001c00spc500pwe
Huawei Secospace USG6500=v500r001c00sph303
Huawei Secospace USG6500=v500r001c00sph508
Huawei Secospace USG6500=v500r001c20
Huawei Secospace USG6500=v500r001c20spc100
Huawei Secospace USG6500=v500r001c20spc100pwe
Huawei Secospace USG6500=v500r001c20spc101
Huawei Secospace USG6500=v500r001c20spc200
Huawei Secospace USG6500=v500r001c20spc200b062
Huawei Secospace USG6500=v500r001c20spc200pwe
Huawei Secospace USG6500=v500r001c20spc300b078
Huawei Secospace USG6500=v500r001c20spc300pwe
Huawei Secospace USG6500 firmware
Huawei Secospace USG6600 firmware=v500r001c00
Huawei Secospace USG6600 firmware=v500r001c00spc100
Huawei Secospace USG6600 firmware=v500r001c00spc200
Huawei Secospace USG6600 firmware=v500r001c00spc300
Huawei Secospace USG6600 firmware=v500r001c00spc301
Huawei Secospace USG6600 firmware=v500r001c00spc500
Huawei Secospace USG6600 firmware=v500r001c00spc500pwe
Huawei Secospace USG6600 firmware=v500r001c00sph303
Huawei Secospace USG6600 firmware=v500r001c20
Huawei Secospace USG6600 firmware=v500r001c20spc100
Huawei Secospace USG6600 firmware=v500r001c20spc100pwe
Huawei Secospace USG6600 firmware=v500r001c20spc101
Huawei Secospace USG6600 firmware=v500r001c20spc200
Huawei Secospace USG6600 firmware=v500r001c20spc200pwe
Huawei Secospace USG6600 firmware=v500r001c20spc300
Huawei Secospace USG6600 firmware=v500r001c20spc300b078
Huawei Secospace USG6600 firmware=v500r001c20spc300pwe
Huawei Secospace USG6600 firmware
Huawei USG9500 firmware=v500r001c00
Huawei USG9500 firmware=v500r001c00spc200
Huawei USG9500 firmware=v500r001c00spc300
Huawei USG9500 firmware=v500r001c00spc303
Huawei USG9500 firmware=v500r001c00spc500
Huawei USG9500 firmware=v500r001c00spc500pwe
Huawei USG9500 firmware=v500r001c00sph303
Huawei USG9500 firmware=v500r001c00sph508
Huawei USG9500 firmware=v500r001c20
Huawei USG9500 firmware=v500r001c20spc100
Huawei USG9500 firmware=v500r001c20spc100pwe
Huawei USG9500 firmware=v500r001c20spc101
Huawei USG9500 firmware=v500r001c20spc200
Huawei USG9500 firmware=v500r001c20spc200b062
Huawei USG9500 firmware=v500r001c20spc200pwe
Huawei USG9500 firmware=v500r001c20spc300b078
Huawei USG9500 firmware=v500r001c20spc300pwe
Huawei Eudemon USG9500

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2017-17155?

    CVE-2017-17155 has been classified with a medium severity rating.

  • How do I fix CVE-2017-17155?

    The fix for CVE-2017-17155 involves updating to the latest version of Huawei IPS Module firmware.

  • Which versions are affected by CVE-2017-17155?

    CVE-2017-17155 affects various versions of Huawei IPS Module firmware including V500R001C00 and several SPC updates.

  • What types of devices are impacted by CVE-2017-17155?

    CVE-2017-17155 impacts Huawei IPS Modules, NGFW Modules, and NIP6300 firmware.

  • Is there a workaround for CVE-2017-17155?

    There are no known effective workarounds for CVE-2017-17155; applying firmware updates is recommended.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203