CVE-2017-17157

CVE-2017-17157 describes an out-of-bounds memory access vulnerability in the IKEv2 implementation across numerous Huawei IPS, NGFW, NIP, Secospace USG, and USG9500 products. This flaw, stemming from insufficient input validation, allows an unauthenticated remote attacker to craft special packets that trigger memory access errors, potentially leading to system exceptions and denial of service. With a CVSSv3 score of 7.5 (High), this vulnerability is remotely exploitable with low attack complexity, requiring no user interaction or privileges. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.