CVE-2017-8167: Input Validation

Published Nov 22, 2017

Updated

Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulnerability by sending malformed IKE packets to the target device. Successful exploit of the vulnerability could cause the device to restart.

Affected Software

2 affected components

Huawei Usg9500 Firmware=v500r001c50

Huawei USG9500

Event History

Nov 22, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8167?

CVE-2017-8167 is considered a critical DoS vulnerability affecting Huawei USG9500 firewall products.

How do I fix CVE-2017-8167?

To mitigate CVE-2017-8167, users should upgrade their Huawei USG9500 firmware to a patched version that addresses the vulnerability.

Who is affected by CVE-2017-8167?

CVE-2017-8167 affects users of the Huawei USG9500 firewall products running firmware version v500r001c50.

What could happen if CVE-2017-8167 is exploited?

Exploitation of CVE-2017-8167 could lead to a denial of service, causing the affected Huawei firewall device to restart.

Are all Huawei USG9500 devices vulnerable to CVE-2017-8167?

Only Huawei USG9500 devices running the specific firmware version v500r001c50 are vulnerable to CVE-2017-8167.