CVE-2017-17137

CVE-2017-17137 describes an out-of-bounds memory access vulnerability in the PEM module of various Huawei products, including DP300, IPS Module, NGFW Module, NIP6300, NIP6600, RP200, S12700, S1700, S2700, S5700, S6700, S7700, S9700, Secospace USG series, TE series, TP series, USG9500, and ViewPoint 9030. An authenticated local attacker can exploit this by submitting a malicious certificate, leading to a denial-of-service condition. Rated Medium severity (CVSS 5.5), the attack requires local access and user authentication, but no user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.