CVE-2017-17160
Severity Score
5.9
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, NetEngine16EX V200R006C10, V200R007C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, SRG2300 V200R006C10, V200R007C00, V200R007C02, SRG3300 V200R006C10, V200R007C00 have a buffer overflow vulnerability due to incomplete range checks of the input data. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious IKE packets to the targeted device. An exploit could allow the attacker to cause the device to write out of bound and restart.
Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, NetEngine16EX V200R006C10, V200R007C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, SRG2300 V200R006C10, V200R007C00, V200R007C02, SRG3300 V200R006C10 y V200R007C00 tienen una vulnerabilidad de desbordamiento de búfer debido a las comprobaciones de rango incompletas de los datos de entrada. Un atacante remoto no autenticado podría explotar esta vulnerabilidad enviando paquetes IKE maliciosos al dispositivo objetivo. Una explotación podría permitir que el atacante provoque que el dispositivo escriba fuera de límites y se reinicie.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-12-04 CVE Reserved
- 2018-02-15 CVE Published
- 2023-12-26 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-ike-en | 2018-03-01 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Ar120-s Firmware Search vendor "Huawei" for product "Ar120-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar120-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar120-s Search vendor "Huawei" for product "Ar120-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar120-s Firmware Search vendor "Huawei" for product "Ar120-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar120-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar120-s Search vendor "Huawei" for product "Ar120-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200 Firmware Search vendor "Huawei" for product "Ar1200 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar1200 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200 Search vendor "Huawei" for product "Ar1200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200 Firmware Search vendor "Huawei" for product "Ar1200 Firmware" | v200r006c13 Search vendor "Huawei" for product "Ar1200 Firmware" and version "v200r006c13" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200 Search vendor "Huawei" for product "Ar1200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200 Firmware Search vendor "Huawei" for product "Ar1200 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar1200 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200 Search vendor "Huawei" for product "Ar1200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200 Firmware Search vendor "Huawei" for product "Ar1200 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar1200 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200 Search vendor "Huawei" for product "Ar1200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200-s Firmware Search vendor "Huawei" for product "Ar1200-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar1200-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200-s Search vendor "Huawei" for product "Ar1200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200-s Firmware Search vendor "Huawei" for product "Ar1200-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar1200-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200-s Search vendor "Huawei" for product "Ar1200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200-s Firmware Search vendor "Huawei" for product "Ar1200-s Firmware" | v200r008c20 Search vendor "Huawei" for product "Ar1200-s Firmware" and version "v200r008c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200-s Search vendor "Huawei" for product "Ar1200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150 Firmware Search vendor "Huawei" for product "Ar150 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar150 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150 Search vendor "Huawei" for product "Ar150" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150 Firmware Search vendor "Huawei" for product "Ar150 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar150 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150 Search vendor "Huawei" for product "Ar150" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150 Firmware Search vendor "Huawei" for product "Ar150 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar150 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150 Search vendor "Huawei" for product "Ar150" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150-s Firmware Search vendor "Huawei" for product "Ar150-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar150-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150-s Search vendor "Huawei" for product "Ar150-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150-s Firmware Search vendor "Huawei" for product "Ar150-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar150-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150-s Search vendor "Huawei" for product "Ar150-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar160 Firmware Search vendor "Huawei" for product "Ar160 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar160 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar160 Search vendor "Huawei" for product "Ar160" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar160 Firmware Search vendor "Huawei" for product "Ar160 Firmware" | v200r006c12 Search vendor "Huawei" for product "Ar160 Firmware" and version "v200r006c12" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar160 Search vendor "Huawei" for product "Ar160" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar160 Firmware Search vendor "Huawei" for product "Ar160 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar160 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar160 Search vendor "Huawei" for product "Ar160" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar160 Firmware Search vendor "Huawei" for product "Ar160 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar160 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar160 Search vendor "Huawei" for product "Ar160" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar200 Firmware Search vendor "Huawei" for product "Ar200 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar200 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar200 Search vendor "Huawei" for product "Ar200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar200 Firmware Search vendor "Huawei" for product "Ar200 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar200 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar200 Search vendor "Huawei" for product "Ar200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar200-s Firmware Search vendor "Huawei" for product "Ar200-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar200-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar200-s Search vendor "Huawei" for product "Ar200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar200-s Firmware Search vendor "Huawei" for product "Ar200-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar200-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar200-s Search vendor "Huawei" for product "Ar200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200 Firmware Search vendor "Huawei" for product "Ar2200 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar2200 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200 Search vendor "Huawei" for product "Ar2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200 Firmware Search vendor "Huawei" for product "Ar2200 Firmware" | v200r006c13 Search vendor "Huawei" for product "Ar2200 Firmware" and version "v200r006c13" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200 Search vendor "Huawei" for product "Ar2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200 Firmware Search vendor "Huawei" for product "Ar2200 Firmware" | v200r006c16pwe Search vendor "Huawei" for product "Ar2200 Firmware" and version "v200r006c16pwe" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200 Search vendor "Huawei" for product "Ar2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200 Firmware Search vendor "Huawei" for product "Ar2200 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar2200 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200 Search vendor "Huawei" for product "Ar2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200-s Firmware Search vendor "Huawei" for product "Ar2200-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar2200-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200-s Search vendor "Huawei" for product "Ar2200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200-s Firmware Search vendor "Huawei" for product "Ar2200-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar2200-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200-s Search vendor "Huawei" for product "Ar2200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200-s Firmware Search vendor "Huawei" for product "Ar2200-s Firmware" | v200r008c20 Search vendor "Huawei" for product "Ar2200-s Firmware" and version "v200r008c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200-s Search vendor "Huawei" for product "Ar2200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r006c11 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r006c11" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3600 Firmware Search vendor "Huawei" for product "Ar3600 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar3600 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3600 Search vendor "Huawei" for product "Ar3600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3600 Firmware Search vendor "Huawei" for product "Ar3600 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar3600 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3600 Search vendor "Huawei" for product "Ar3600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c12 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c12" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c13 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c13" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c15 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c15" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c16 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c16" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c17 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c17" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Netengine16ex Firmware Search vendor "Huawei" for product "Netengine16ex Firmware" | v200r006c10 Search vendor "Huawei" for product "Netengine16ex Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Netengine16ex Search vendor "Huawei" for product "Netengine16ex" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Netengine16ex Firmware Search vendor "Huawei" for product "Netengine16ex Firmware" | v200r007c00 Search vendor "Huawei" for product "Netengine16ex Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Netengine16ex Search vendor "Huawei" for product "Netengine16ex" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Srg1300 Firmware Search vendor "Huawei" for product "Srg1300 Firmware" | v200r006c10 Search vendor "Huawei" for product "Srg1300 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Srg1300 Search vendor "Huawei" for product "Srg1300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Srg1300 Firmware Search vendor "Huawei" for product "Srg1300 Firmware" | v200r007c00 Search vendor "Huawei" for product "Srg1300 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Srg1300 Search vendor "Huawei" for product "Srg1300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Srg1300 Firmware Search vendor "Huawei" for product "Srg1300 Firmware" | v200r007c02 Search vendor "Huawei" for product "Srg1300 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Srg1300 Search vendor "Huawei" for product "Srg1300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Srg2300 Firmware Search vendor "Huawei" for product "Srg2300 Firmware" | v200r006c10 Search vendor "Huawei" for product "Srg2300 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Srg2300 Search vendor "Huawei" for product "Srg2300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Srg2300 Firmware Search vendor "Huawei" for product "Srg2300 Firmware" | v200r007c00 Search vendor "Huawei" for product "Srg2300 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Srg2300 Search vendor "Huawei" for product "Srg2300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Srg2300 Firmware Search vendor "Huawei" for product "Srg2300 Firmware" | v200r007c02 Search vendor "Huawei" for product "Srg2300 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Srg2300 Search vendor "Huawei" for product "Srg2300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Srg3300 Firmware Search vendor "Huawei" for product "Srg3300 Firmware" | v200r006c10 Search vendor "Huawei" for product "Srg3300 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Srg3300 Search vendor "Huawei" for product "Srg3300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Srg3300 Firmware Search vendor "Huawei" for product "Srg3300 Firmware" | v200r007c00 Search vendor "Huawei" for product "Srg3300 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Srg3300 Search vendor "Huawei" for product "Srg3300" | - | - |
Safe
|