5.5

CVE-2017-17138

PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has a DoS vulnerability in PEM module of Huawei products due to insufficient verification. An authenticated local attacker can make processing into deadloop by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Dp300 Firmware Version v500r002c00
   Huawei ≫ Dp300 Version -
Huawei ≫ Ips Module Firmware Version v500r001c00
   Huawei ≫ Ips Module Version -
Huawei ≫ Ips Module Firmware Version v500r001c30
   Huawei ≫ Ips Module Version -
Huawei ≫ Ngfw Module Firmware Version v500r001c00
   Huawei ≫ Ngfw Module Version -
Huawei ≫ Ngfw Module Firmware Version v500r002c00
   Huawei ≫ Ngfw Module Version -
Huawei ≫ Nip6300 Firmware Version v500r001c00
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6300 Firmware Version v500r001c30
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c00
   Huawei ≫ Nip6600 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c30
   Huawei ≫ Nip6600 Version -
Huawei ≫ Rp200 Firmware Version v500r002c00
   Huawei ≫ Rp200 Version -
Huawei ≫ Rp200 Firmware Version v600r006c00
   Huawei ≫ Rp200 Version -
Huawei ≫ S12700 Firmware Version v200r007c00
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r007c01
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r008c00
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r009c00
   Huawei ≫ S12700 Version -
Huawei ≫ S12700 Firmware Version v200r010c00
   Huawei ≫ S12700 Version -
Huawei ≫ S1700 Firmware Version v200r006c10
   Huawei ≫ S1700 Version -
Huawei ≫ S1700 Firmware Version v200r009c00
   Huawei ≫ S1700 Version -
Huawei ≫ S1700 Firmware Version v200r010c00
   Huawei ≫ S1700 Version -
Huawei ≫ S2700 Firmware Version v200r006c10
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r007c00
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r008c00
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r009c00
   Huawei ≫ S2700 Version -
Huawei ≫ S2700 Firmware Version v200r010c00
   Huawei ≫ S2700 Version -
Huawei ≫ S5700 Firmware Version v200r006c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r007c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r008c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r009c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r010c00
   Huawei ≫ S5700 Version -
Huawei ≫ S6700 Firmware Version v200r008c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r009c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r010c00
   Huawei ≫ S6700 Version -
Huawei ≫ S7700 Firmware Version v200r007c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r008c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r009c00
   Huawei ≫ S7700 Version -
Huawei ≫ S7700 Firmware Version v200r010c00
   Huawei ≫ S7700 Version -
Huawei ≫ S9700 Firmware Version v200r007c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r007c01
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r008c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r009c00
   Huawei ≫ S9700 Version -
Huawei ≫ S9700 Firmware Version v200r010c00
   Huawei ≫ S9700 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c00
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c00
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c00
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30s
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Te30 Firmware Version v100r001c02
   Huawei ≫ Te30 Version -
Huawei ≫ Te30 Firmware Version v100r001c10
   Huawei ≫ Te30 Version -
Huawei ≫ Te30 Firmware Version v500r002c00
   Huawei ≫ Te30 Version -
Huawei ≫ Te30 Firmware Version v600r006c00
   Huawei ≫ Te30 Version -
Huawei ≫ Te40 Firmware Version v500r002c00
   Huawei ≫ Te40 Version -
Huawei ≫ Te40 Firmware Version v600r006c00
   Huawei ≫ Te40 Version -
Huawei ≫ Te50 Firmware Version v500r002c00
   Huawei ≫ Te50 Version -
Huawei ≫ Te50 Firmware Version v600r006c00
   Huawei ≫ Te50 Version -
Huawei ≫ Te60 Firmware Version v100r001c02
   Huawei ≫ Te60 Version -
Huawei ≫ Te60 Firmware Version v100r001c10
   Huawei ≫ Te60 Version -
Huawei ≫ Te60 Firmware Version v500r002c00
   Huawei ≫ Te60 Version -
Huawei ≫ Te60 Firmware Version v600r006c00
   Huawei ≫ Te60 Version -
Huawei ≫ Tp3106 Firmware Version v100r002c00
   Huawei ≫ Tp3106 Version -
Huawei ≫ Tp3206 Firmware Version v100r002c00
   Huawei ≫ Tp3206 Version -
Huawei ≫ Tp3206 Firmware Version v100r002c10
   Huawei ≫ Tp3206 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c00
   Huawei ≫ Usg9500 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c30
   Huawei ≫ Usg9500 Version -
Huawei ≫ Viewpoint 9030 Firmware Version v100r011c02
   Huawei ≫ Viewpoint 9030 Version -
Huawei ≫ Viewpoint 9030 Firmware Version v100r011c03
   Huawei ≫ Viewpoint 9030 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.034
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en
Vendor Advisory