CVE-2017-17156

CVE-2017-17156 describes an out-of-bounds memory access vulnerability in the IKEv2 implementation of various Huawei IPS, NGFW, NIP, Secospace USG, and USG9500 products across multiple V500R001C00 and V500R001C20 versions. This flaw stems from insufficient input validation, allowing an unauthenticated attacker to craft special packets. Successful exploitation could trigger out-of-bounds memory access, potentially leading to system exceptions and denial of service. The vulnerability is rated High severity (CVSS 7.5) due to its network attack vector and low attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.