CVE-2017-17154 describes a Denial of Service (DoS) vulnerability in the IKEv2 implementation across various Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, and USG9500 products. This flaw stems from insufficient input validation, allowing an attacker to trigger unauthorized memory access and potentially cause system exceptions. Rated with a CVSS v3.0 score of 7.5 (High), this vulnerability can be exploited remotely over the network with low attack complexity and no user interaction required. The primary impact is high availability, as it can lead to a denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's Known Exploited Vulnerabilities (KEV) catalog. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
v500r001c00CPE matchmatch criteria | cpe:2.3:o:huawei:ips_module_firmware:v500r001c00:*:*:*:*:*:*:* | ||
v500r001c00spc200CPE matchmatch criteria | cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc200:*:*:*:*:*:*:* | ||
v500r001c00spc300CPE matchmatch criteria | cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc300:*:*:*:*:*:*:* | ||
v500r001c00spc500CPE matchmatch criteria | cpe:2.3:o:huawei:ips_module_firmware:v500r001c00spc500:*:*:*:*:*:*:* | ||
v500r001c00sph303CPE matchmatch criteria | cpe:2.3:o:huawei:ips_module_firmware:v500r001c00sph303:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.