5.5

CVE-2017-17162

Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attacker execute special commands many times. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30spc100
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30spc200
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30spc300
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c30spc100
   Huawei ≫ Usg9500 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c30spc200
   Huawei ≫ Usg9500 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c30spc300
   Huawei ≫ Usg9500 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.11
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-02-firewall-en
Vendor Advisory