CVE-2017-17137

State: Published
Severity: Not scored
Published: Mar 5, 2018
Updated: Sep 17, 2024
Reserved: Dec 4, 2017

Description

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60; TP3106; TP3206; USG9500; ViewPoint 9030Huawei Technologies Co., Ltd.	DP300 V500R002C00Affected IPS Module V500R001C00Affected V500R001C30Affected NGFW Module V500R001C00Affected V500R002C00Affected NIP6300 V500R001C00Affected NIP6600 V500R001C00Affected RP200 V500R002C00Affected V600R006C00Affected S12700 V200R007C00Affected V200R007C01Affected V200R008C00Affected V200R009C00Affected V200R010C00Affected S1700 V200R006C10Affected S2700 V200R006C10Affected V200R007C00Affected S5700 V200R006C00Affected S6700 V200R008C00Affected S7700 V200R007C00Affected S9700 V200R007C00Affected Secospace USG6300 V500R001C00Affected Secospace USG6500 V500R001C00Affected Secospace USG6600 V500R001C00Affected V500R001C30SAffected and 11 more versions

Product

Versions

DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60; TP3106; TP3206; USG9500; ViewPoint 9030Huawei Technologies Co., Ltd.

DP300 V500R002C00Affected
IPS Module V500R001C00Affected
V500R001C30Affected
NGFW Module V500R001C00Affected
V500R002C00Affected
NIP6300 V500R001C00Affected
NIP6600 V500R001C00Affected
RP200 V500R002C00Affected
V600R006C00Affected
S12700 V200R007C00Affected
V200R007C01Affected
V200R008C00Affected
V200R009C00Affected
V200R010C00Affected
S1700 V200R006C10Affected
S2700 V200R006C10Affected
V200R007C00Affected
S5700 V200R006C00Affected
S6700 V200R008C00Affected
S7700 V200R007C00Affected
S9700 V200R007C00Affected
Secospace USG6300 V500R001C00Affected
Secospace USG6500 V500R001C00Affected
Secospace USG6600 V500R001C00Affected
V500R001C30SAffected
and 11 more versions

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.