Login Request a demo
High severity · published Aug 21, 2018
CVE-2017-17311
Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1…
7.5
CVSS
1.1%
EPSS
No
On KEV
Description
Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent crafted packets to the affected device to exploit these vulnerabilities. Successful exploit the vulnerability could lead to device deny of service.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UU
USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSR · Huawei Technologies Co., Ltd.
USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 · source: vendor
UF
Usg2205bsr Firmware · Huawei
v300r001c10spc600 · source: NVD
UF
Usg2220bsr Firmware · Huawei
v300r001c00 · source: NVD
UF
Usg5120bsr Firmware · Huawei
v300r001c00 · source: NVD
UF
Usg5150bsr Firmware · Huawei
v300r001c00 · source: NVD
Affected product
UU
USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSR
Huawei Technologies Co., Ltd.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-17311
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-17311
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180813-01-Bleichenbacher-en
More from USG2205BSR; USG2220BSR; USG5120BSR; USG5150BSR
7.5
CVE-2017-17312
Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1…
5.9
CVE-2017-17305
Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in…