CVE-2017-17152

CVE-2017-17152 describes an out-of-bounds write vulnerability in the IKEv2 implementation across various Huawei IPS Module, NGFW Module, NIP, Secospace USG, and USG9500 products. This flaw stems from insufficient input validation, allowing an unauthenticated attacker to craft special packets. Successful exploitation could lead to an out-of-bounds memory write, potentially causing system exceptions and denial of service. Rated with a CVSS v3 score of 5.9 (Medium), this vulnerability has a network attack vector and high attack complexity, requiring no user interaction. The primary impact is a high availability loss, as an attacker could disrupt affected systems. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting low public attention.