CVE-2017-17299
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00S, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, IPS Module V500R001C30, NIP6300 V500R001C30, NetEngine16EX V200R006C10, V200R007C00 have an insufficient input validation vulnerability. An unauthenticated, remote attacker may send crafted IKE V2 messages to the affected products. Due to the insufficient validation of the messages, successful exploit will cause invalid memory access and result in a denial of service on the affected products.
Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00S, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, IPS Module V500R001C30, NIP6300 V500R001C30, NetEngine16EX V200R006C10 y V200R007C00 tienen una vulnerabilidad de validación de entradas insuficiente. Un atacante remoto no autenticado podría enviar mensajes IKE V2 manipulados a los productos afectados. Debido a la validación insuficiente de los mensajes, una explotación con éxito provocará un acceso inválido a la memoria y resultará en una denegación de servicio (DoS) en los productos afectados
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-12-04 CVE Reserved
- 2018-02-15 CVE Published
- 2023-12-26 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-ike-en | 2018-03-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Ar120-s Firmware Search vendor "Huawei" for product "Ar120-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar120-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar120-s Search vendor "Huawei" for product "Ar120-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar120-s Firmware Search vendor "Huawei" for product "Ar120-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar120-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar120-s Search vendor "Huawei" for product "Ar120-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200 Firmware Search vendor "Huawei" for product "Ar1200 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar1200 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200 Search vendor "Huawei" for product "Ar1200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200 Firmware Search vendor "Huawei" for product "Ar1200 Firmware" | v200r006c13 Search vendor "Huawei" for product "Ar1200 Firmware" and version "v200r006c13" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200 Search vendor "Huawei" for product "Ar1200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200 Firmware Search vendor "Huawei" for product "Ar1200 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar1200 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200 Search vendor "Huawei" for product "Ar1200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200 Firmware Search vendor "Huawei" for product "Ar1200 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar1200 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200 Search vendor "Huawei" for product "Ar1200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200-s Firmware Search vendor "Huawei" for product "Ar1200-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar1200-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200-s Search vendor "Huawei" for product "Ar1200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200-s Firmware Search vendor "Huawei" for product "Ar1200-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar1200-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200-s Search vendor "Huawei" for product "Ar1200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar1200-s Firmware Search vendor "Huawei" for product "Ar1200-s Firmware" | v200r008c20 Search vendor "Huawei" for product "Ar1200-s Firmware" and version "v200r008c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar1200-s Search vendor "Huawei" for product "Ar1200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150 Firmware Search vendor "Huawei" for product "Ar150 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar150 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150 Search vendor "Huawei" for product "Ar150" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150 Firmware Search vendor "Huawei" for product "Ar150 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar150 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150 Search vendor "Huawei" for product "Ar150" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150 Firmware Search vendor "Huawei" for product "Ar150 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar150 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150 Search vendor "Huawei" for product "Ar150" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150-s Firmware Search vendor "Huawei" for product "Ar150-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar150-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150-s Search vendor "Huawei" for product "Ar150-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar150-s Firmware Search vendor "Huawei" for product "Ar150-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar150-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar150-s Search vendor "Huawei" for product "Ar150-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar160 Firmware Search vendor "Huawei" for product "Ar160 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar160 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar160 Search vendor "Huawei" for product "Ar160" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar160 Firmware Search vendor "Huawei" for product "Ar160 Firmware" | v200r006c12 Search vendor "Huawei" for product "Ar160 Firmware" and version "v200r006c12" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar160 Search vendor "Huawei" for product "Ar160" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar160 Firmware Search vendor "Huawei" for product "Ar160 Firmware" | v200r007c00s Search vendor "Huawei" for product "Ar160 Firmware" and version "v200r007c00s" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar160 Search vendor "Huawei" for product "Ar160" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar160 Firmware Search vendor "Huawei" for product "Ar160 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar160 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar160 Search vendor "Huawei" for product "Ar160" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar200 Firmware Search vendor "Huawei" for product "Ar200 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar200 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar200 Search vendor "Huawei" for product "Ar200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar200 Firmware Search vendor "Huawei" for product "Ar200 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar200 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar200 Search vendor "Huawei" for product "Ar200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar200-s Firmware Search vendor "Huawei" for product "Ar200-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar200-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar200-s Search vendor "Huawei" for product "Ar200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar200-s Firmware Search vendor "Huawei" for product "Ar200-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar200-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar200-s Search vendor "Huawei" for product "Ar200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200 Firmware Search vendor "Huawei" for product "Ar2200 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar2200 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200 Search vendor "Huawei" for product "Ar2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200 Firmware Search vendor "Huawei" for product "Ar2200 Firmware" | v200r006c13 Search vendor "Huawei" for product "Ar2200 Firmware" and version "v200r006c13" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200 Search vendor "Huawei" for product "Ar2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200 Firmware Search vendor "Huawei" for product "Ar2200 Firmware" | v200r006c16 Search vendor "Huawei" for product "Ar2200 Firmware" and version "v200r006c16" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200 Search vendor "Huawei" for product "Ar2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200 Firmware Search vendor "Huawei" for product "Ar2200 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar2200 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200 Search vendor "Huawei" for product "Ar2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200 Firmware Search vendor "Huawei" for product "Ar2200 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar2200 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200 Search vendor "Huawei" for product "Ar2200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200-s Firmware Search vendor "Huawei" for product "Ar2200-s Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar2200-s Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200-s Search vendor "Huawei" for product "Ar2200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200-s Firmware Search vendor "Huawei" for product "Ar2200-s Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar2200-s Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200-s Search vendor "Huawei" for product "Ar2200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar2200-s Firmware Search vendor "Huawei" for product "Ar2200-s Firmware" | v200r008c20 Search vendor "Huawei" for product "Ar2200-s Firmware" and version "v200r008c20" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar2200-s Search vendor "Huawei" for product "Ar2200-s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r006c11 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r006c11" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3200 Firmware Search vendor "Huawei" for product "Ar3200 Firmware" | v200r007c02 Search vendor "Huawei" for product "Ar3200 Firmware" and version "v200r007c02" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3200 Search vendor "Huawei" for product "Ar3200" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3600 Firmware Search vendor "Huawei" for product "Ar3600 Firmware" | v200r006c10 Search vendor "Huawei" for product "Ar3600 Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3600 Search vendor "Huawei" for product "Ar3600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar3600 Firmware Search vendor "Huawei" for product "Ar3600 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar3600 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar3600 Search vendor "Huawei" for product "Ar3600" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c12 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c12" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c13 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c13" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c15 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c15" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c16 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c16" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r006c17 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r006c17" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ar510 Firmware Search vendor "Huawei" for product "Ar510 Firmware" | v200r007c00 Search vendor "Huawei" for product "Ar510 Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ar510 Search vendor "Huawei" for product "Ar510" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Ips Module Firmware Search vendor "Huawei" for product "Ips Module Firmware" | v500r001c30 Search vendor "Huawei" for product "Ips Module Firmware" and version "v500r001c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Ips Module Search vendor "Huawei" for product "Ips Module" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Nip6300 Firmware Search vendor "Huawei" for product "Nip6300 Firmware" | v500r001c30 Search vendor "Huawei" for product "Nip6300 Firmware" and version "v500r001c30" | - |
Affected
| in | Huawei Search vendor "Huawei" | Nip6300 Search vendor "Huawei" for product "Nip6300" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Netengine16ex Firmware Search vendor "Huawei" for product "Netengine16ex Firmware" | v200r006c10 Search vendor "Huawei" for product "Netengine16ex Firmware" and version "v200r006c10" | - |
Affected
| in | Huawei Search vendor "Huawei" | Netengine16ex Search vendor "Huawei" for product "Netengine16ex" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Netengine16ex Firmware Search vendor "Huawei" for product "Netengine16ex Firmware" | v200r007c00 Search vendor "Huawei" for product "Netengine16ex Firmware" and version "v200r007c00" | - |
Affected
| in | Huawei Search vendor "Huawei" | Netengine16ex Search vendor "Huawei" for product "Netengine16ex" | - | - |
Safe
|