PT-2018-6487 · Huawei · Usg5150Bsr+4

Adam Czubak + 4 · Publicado 2018-08-13 · Atualizado 2018-10-12 · CVE-2017-17312

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Huawei Firewall products USG2205BSR version V300R001C10SPC600 Huawei Firewall products USG2220BSR version V300R001C00 Huawei Firewall products USG5120BSR version V300R001C00 Huawei Firewall products USG5150BSR version V300R001C00

Description: The issue is related to a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. This vulnerability is caused by improper handling of malformed messages. An attacker can exploit this by sending crafted packets to the affected device, potentially leading to a denial of service.

Recommendations: For USG2205BSR version V300R001C10SPC600, update the IPSEC IKEv1 implementation to properly handle malformed messages. For USG2220BSR version V300R001C00, update the IPSEC IKEv1 implementation to properly handle malformed messages. For USG5120BSR version V300R001C00, update the IPSEC IKEv1 implementation to properly handle malformed messages. For USG5150BSR version V300R001C00, update the IPSEC IKEv1 implementation to properly handle malformed messages. As a temporary workaround, consider restricting access to the IPSEC IKEv1 implementation until a patch is available.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-17312

Produtos afetados

Huawei Vrp

Usg2205Bsr

Usg2220Bsr

Usg5120Bsr

Usg5150Bsr

Referências · 3

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-17312 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17312 · Nota de Segurança