CVE-2017-17163

Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service.

Score

CVSS 3.0 5.5 Medium

Status

Modified - psirt@huawei.com

Published

2018-02-15

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Secospace Usg6600 Firmware (Huawei)
• Secospace Usg6600 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-01-firewall-en