CVE-2017-17162: Medium severity Huawei Secospace Usg6600 Firmware vulnerability

Published Feb 15, 2018

Updated

Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attacker execute special commands many times. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.

Affected Software

8 affected components

Huawei Secospace Usg6600 Firmware=v500r001c30spc100

Huawei Secospace Usg6600 Firmware=v500r001c30spc200

Huawei Secospace Usg6600 Firmware=v500r001c30spc300

Huawei Secospace USG6600

Huawei Usg9500 Firmware=v500r001c30spc100

Huawei Usg9500 Firmware=v500r001c30spc200

Huawei Usg9500 Firmware=v500r001c30spc300

Huawei USG9500

Event History

Feb 15, 2018

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-17162?

CVE-2017-17162 has a medium severity level due to its potential for resource exhaustion through a memory leak.

How do I fix CVE-2017-17162?

To fix CVE-2017-17162, update your Huawei Secospace USG6600 or USG9500 firmware to the latest patched version.

What systems are affected by CVE-2017-17162?

CVE-2017-17162 affects Huawei Secospace USG6600 firmware versions V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC300 and USG9500 firmware versions V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC300.

Who is vulnerable to CVE-2017-17162?

Local authenticated attackers with access to the affected Huawei firewall devices are vulnerable to CVE-2017-17162.

What is the impact of CVE-2017-17162?

The impact of CVE-2017-17162 includes potential denial of service due to resource exhaustion leading to a slowdown or crash of affected devices.