PT-2017-18173 · Huawei · Usg9500+1

Publicado 2017-10-25 · Atualizado 2017-12-12 · CVE-2017-8167

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei firewall products USG9500 version V500R001C50

Description The issue is related to a DoS vulnerability that can be exploited by a remote attacker who controls the peer device. The attacker can send malformed IKE packets to the target device, which could cause the device to restart due to insufficient input validation.

Recommendations For Huawei firewall products USG9500 version V500R001C50, consider restricting access to the device to minimize the risk of exploitation until a fix is available. As a temporary workaround, avoid using the IKE protocol in the affected device until the issue is resolved.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-8167

Produtos afetados

Huawei Vrp

Usg9500

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-8167 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-firewall-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8167 · Nota de Segurança