Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-17153 Details

Description

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has a memory leak vulnerability due to memory release failure resulted from insufficient input validation. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en	CVE	Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-ikev2-en	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]
CWE-772	Missing Release of Resource after Effective Lifetime	[email protected]

Affected Products

Product	Versions
huawei ips module firmware	v500r001c00 v500r001c00spc200 v500r001c00spc300 v500r001c00spc500 v500r001c00sph303
CPE cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc200:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc300:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc500:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph303:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph508:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc100pwe:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200b062:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc200pwe:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300b078:::::::* cpe:2.3:o:huawei:ips_module_firmware:v500r001c20spc300pwe:::::::* Remediation No remediation found in references.
huawei ips module	All versions
CPE cpe:2.3:h:huawei:ips_module:-:::::::* Remediation No remediation found in references.
huawei ngfw module firmware	v500r001c00 v500r001c00spc200 v500r001c00spc300 v500r001c00spc500 v500r001c00spc500pwe
CPE cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc200:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc300:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00spc500pwe:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph303:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c00sph508:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc100pwe:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200b062:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc200pwe:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300b078:::::::* cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c20spc300pwe:::::::* Remediation No remediation found in references.
huawei ngfw module	All versions
CPE cpe:2.3:h:huawei:ngfw_module:-:::::::* Remediation No remediation found in references.
huawei nip6300 firmware	v500r001c00 v500r001c00spc200 v500r001c00spc300 v500r001c00spc500 v500r001c00sph303
CPE cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc200:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc300:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c00spc500:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph303:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c00sph508:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc100pwe:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200b062:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc200pwe:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300b078:::::::* cpe:2.3:o:huawei:nip6300_firmware:v500r001c20spc300pwe:::::::* Remediation No remediation found in references.
huawei nip6300	All versions
CPE cpe:2.3:h:huawei:nip6300:-:::::::* Remediation No remediation found in references.
huawei nip6600 firmware	v500r001c00 v500r001c00spc200 v500r001c00spc300 v500r001c00spc500 v500r001c00sph303
CPE cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc200:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc300:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c00spc500:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph303:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c00sph508:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc100pwe:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200b062:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc200pwe:::::::* cpe:2.3:o:huawei:nip6600_firmware:v500r001c20spc300b078:::::::* Remediation No remediation found in references.
huawei nip6600	All versions
CPE cpe:2.3:h:huawei:nip6600:-:::::::* Remediation No remediation found in references.
huawei secospace usg6300 firmware	v500r001c00 v500r001c00spc200 v500r001c00spc300 v500r001c00spc500 v500r001c00spc500pwe
CPE cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc200:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc300:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00spc500pwe:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph303:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00sph508:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc100pwe:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc101:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200b062:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc200pwe:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300b078:::::::* cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20spc300pwe:::::::* Remediation No remediation found in references.
huawei secospace usg6300	All versions
CPE cpe:2.3:h:huawei:secospace_usg6300:-:::::::* Remediation No remediation found in references.
huawei secospace usg6500 firmware	v500r001c00 v500r001c00spc200 v500r001c00spc300 v500r001c00spc500 v500r001c00spc500pwe
CPE cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc200:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc300:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00spc500pwe:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph303:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00sph508:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc100pwe:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc101:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200b062:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc200pwe:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300b078:::::::* cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20spc300pwe:::::::* Remediation No remediation found in references.
huawei secospace usg6500	All versions
CPE cpe:2.3:h:huawei:secospace_usg6500:-:::::::* Remediation No remediation found in references.
huawei secospace usg6600 firmware	v500r001c00 v500r001c00spc100 v500r001c00spc200 v500r001c00spc300 v500r001c00spc301
CPE cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc100:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc200:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc300:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc301:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00spc500pwe:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00sph303:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc100pwe:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc101:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc200pwe:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300b078:::::::* cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20spc300pwe:::::::* Remediation No remediation found in references.
huawei secospace usg6600	All versions
CPE cpe:2.3:h:huawei:secospace_usg6600:-:::::::* Remediation No remediation found in references.
huawei usg9500 firmware	v500r001c00 v500r001c00spc200 v500r001c00spc300 v500r001c00spc303 v500r001c00spc500
CPE cpe:2.3:o:huawei:usg9500_firmware:v500r001c00:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc200:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc300:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc303:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c00spc500pwe:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph303:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c00sph508:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc100pwe:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc101:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200b062:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc200pwe:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300b078:::::::* cpe:2.3:o:huawei:usg9500_firmware:v500r001c20spc300pwe:::::::* Remediation No remediation found in references.
huawei usg9500	All versions
CPE cpe:2.3:h:huawei:usg9500:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 3, 2019	CWE Remap	[email protected]
Feb 24, 2018	Initial Analysis	[email protected]

CVE-2017-17153 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO