CVE-2017-17162

Severity Score

5.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attacker execute special commands many times. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.

Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 tienen una vulnerabilidad de fuga de memoria debido a que la memoria no se libera cuando un atacante local autenticado ejecuta comandos especiales muchas veces. Un atacante podría aprovecharse de esto para provocar una fuga de memoria, lo que podría conducir a excepciones del sistema.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2017-12-04 CVE Reserved
2018-02-15 CVE Published
2023-03-08 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-772: Missing Release of Resource after Effective Lifetime

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-02-firewall-en	2019-10-03

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Huawei Search vendor "Huawei"	Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware"	v500r001c30spc100 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c30spc100"	-	Affected	in	Huawei Search vendor "Huawei"	Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600"	-	-	Safe
Huawei Search vendor "Huawei"	Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware"	v500r001c30spc200 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c30spc200"	-	Affected	in	Huawei Search vendor "Huawei"	Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600"	-	-	Safe
Huawei Search vendor "Huawei"	Secospace Usg6600 Firmware Search vendor "Huawei" for product "Secospace Usg6600 Firmware"	v500r001c30spc300 Search vendor "Huawei" for product "Secospace Usg6600 Firmware" and version "v500r001c30spc300"	-	Affected	in	Huawei Search vendor "Huawei"	Secospace Usg6600 Search vendor "Huawei" for product "Secospace Usg6600"	-	-	Safe
Huawei Search vendor "Huawei"	Usg9500 Firmware Search vendor "Huawei" for product "Usg9500 Firmware"	v500r001c30spc100 Search vendor "Huawei" for product "Usg9500 Firmware" and version "v500r001c30spc100"	-	Affected	in	Huawei Search vendor "Huawei"	Usg9500 Search vendor "Huawei" for product "Usg9500"	-	-	Safe
Huawei Search vendor "Huawei"	Usg9500 Firmware Search vendor "Huawei" for product "Usg9500 Firmware"	v500r001c30spc200 Search vendor "Huawei" for product "Usg9500 Firmware" and version "v500r001c30spc200"	-	Affected	in	Huawei Search vendor "Huawei"	Usg9500 Search vendor "Huawei" for product "Usg9500"	-	-	Safe
Huawei Search vendor "Huawei"	Usg9500 Firmware Search vendor "Huawei" for product "Usg9500 Firmware"	v500r001c30spc300 Search vendor "Huawei" for product "Usg9500 Firmware" and version "v500r001c30spc300"	-	Affected	in	Huawei Search vendor "Huawei"	Usg9500 Search vendor "Huawei" for product "Usg9500"	-	-	Safe