PT-2017-14731 · Huawei · Nip6600+8

Published 2017-12-06 · Updated 2018-02-26 · CVE-2017-17152

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R001C00 through V500R001C20SPC300PWE NGFW Module versions V500R001C00 through V500R001C20SPC300PWE NIP6300 versions V500R001C00 through V500R001C20SPC300PWE NIP6600 versions V500R001C00 through V500R001C20SPC300PWE Secospace USG6300 versions V500R001C00 through V500R001C20SPC300PWE Secospace USG6500 versions V500R001C00 through V500R001C20SPC300PWE Secospace USG6600 versions V500R001C00 through V500R001C20SPC300PWE USG9500 versions V500R001C00 through V500R001C20SPC300PWE

Description The IKEv2 protocol in Huawei products has an out-of-bounds write vulnerability due to insufficient input validation. An attacker could exploit it to craft special packets to trigger out-of-bounds memory write, which may further lead to system exceptions.

Recommendations For Huawei IPS Module versions V500R001C00 through V500R001C20SPC300PWE, update to a fixed version to resolve the issue. For NGFW Module versions V500R001C00 through V500R001C20SPC300PWE, update to a fixed version to resolve the issue. For NIP6300 versions V500R001C00 through V500R001C20SPC300PWE, update to a fixed version to resolve the issue. For NIP6600 versions V500R001C00 through V500R001C20SPC300PWE, update to a fixed version to resolve the issue. For Secospace USG6300 versions V500R001C00 through V500R001C20SPC300PWE, update to a fixed version to resolve the issue. For Secospace USG6500 versions V500R001C00 through V500R001C20SPC300PWE, update to a fixed version to resolve the issue. For Secospace USG6600 versions V500R001C00 through V500R001C20SPC300PWE, update to a fixed version to resolve the issue. For USG9500 versions V500R001C00 through V500R001C20SPC300PWE, update to a fixed version to resolve the issue. As a temporary workaround, consider disabling the IKEv2 protocol until a patch is available.

Fix

RCE

Memory Corruption

Weakness Enumeration

CWE-20

CWE-787

Related Identifiers

CVE-2017-17152

Affected Products

Huawei Ips Module

Huawei Vrp

Ngfw Module

Nip6300

Nip6600

Secospace Usg6300

Secospace Usg6500

Secospace Usg6600

Usg9500

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-17152 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-17152 · Vendor Advisory