CVE-2017-17299
Summary
| CVE | CVE-2017-17299 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-02-15 16:29:00 UTC |
| Updated | 2018-03-09 14:36:00 UTC |
| Description | Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00S, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, IPS Module V500R001C30, NIP6300 V500R001C30, NetEngine16EX V200R006C10, V200R007C00 have an insufficient input validation vulnerability. An unauthenticated, remote attacker may send crafted IKE V2 messages to the affected products. Due to the insufficient validation of the messages, successful exploit will cause invalid memory access and result in a denial of service on the affected products. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Ar120-s | - | All | All | All |
| Hardware | Huawei | Ar120-s | - | All | All | All |
| Operating System | Huawei | Ar120-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar120-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar120-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar120-s Firmware | v200r007c00 | All | All | All |
| Hardware | Huawei | Ar1200 | - | All | All | All |
| Hardware | Huawei | Ar1200 | - | All | All | All |
| Hardware | Huawei | Ar1200-s | - | All | All | All |
| Hardware | Huawei | Ar1200-s | - | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar1200-s Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r006c13 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r007c02 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r006c13 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar1200 Firmware | v200r007c02 | All | All | All |
| Hardware | Huawei | Ar150 | - | All | All | All |
| Hardware | Huawei | Ar150 | - | All | All | All |
| Hardware | Huawei | Ar150-s | - | All | All | All |
| Hardware | Huawei | Ar150-s | - | All | All | All |
| Operating System | Huawei | Ar150-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar150-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar150-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar150-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r007c02 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar150 Firmware | v200r007c02 | All | All | All |
| Hardware | Huawei | Ar160 | - | All | All | All |
| Hardware | Huawei | Ar160 | - | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r006c12 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r007c00s | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r007c02 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r006c12 | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r007c00s | All | All | All |
| Operating System | Huawei | Ar160 Firmware | v200r007c02 | All | All | All |
| Hardware | Huawei | Ar200 | - | All | All | All |
| Hardware | Huawei | Ar200 | - | All | All | All |
| Hardware | Huawei | Ar200-s | - | All | All | All |
| Hardware | Huawei | Ar200-s | - | All | All | All |
| Operating System | Huawei | Ar200-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar200-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar200-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar200-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar200 Firmware | v200r007c00 | All | All | All |
| Hardware | Huawei | Ar2200 | - | All | All | All |
| Hardware | Huawei | Ar2200 | - | All | All | All |
| Hardware | Huawei | Ar2200-s | - | All | All | All |
| Hardware | Huawei | Ar2200-s | - | All | All | All |
| Operating System | Huawei | Ar2200-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar2200-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar2200-s Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar2200-s Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar2200-s Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar2200-s Firmware | v200r008c20 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r006c13 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r006c16 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r007c02 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r006c13 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r006c16 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar2200 Firmware | v200r007c02 | All | All | All |
| Hardware | Huawei | Ar3200 | - | All | All | All |
| Hardware | Huawei | Ar3200 | - | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r006c11 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r007c02 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r006c11 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar3200 Firmware | v200r007c02 | All | All | All |
| Hardware | Huawei | Ar3600 | - | All | All | All |
| Hardware | Huawei | Ar3600 | - | All | All | All |
| Operating System | Huawei | Ar3600 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar3600 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar3600 Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Ar3600 Firmware | v200r007c00 | All | All | All |
| Hardware | Huawei | Ar510 | - | All | All | All |
| Hardware | Huawei | Ar510 | - | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c12 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c13 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c15 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c16 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c17 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c12 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c13 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c15 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c16 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r006c17 | All | All | All |
| Operating System | Huawei | Ar510 Firmware | v200r007c00 | All | All | All |
| Hardware | Huawei | Ips Module | - | All | All | All |
| Hardware | Huawei | Ips Module | - | All | All | All |
| Operating System | Huawei | Ips Module Firmware | v500r001c30 | All | All | All |
| Operating System | Huawei | Ips Module Firmware | v500r001c30 | All | All | All |
| Hardware | Huawei | Netengine16ex | - | All | All | All |
| Hardware | Huawei | Netengine16ex | - | All | All | All |
| Operating System | Huawei | Netengine16ex Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Netengine16ex Firmware | v200r007c00 | All | All | All |
| Operating System | Huawei | Netengine16ex Firmware | v200r006c10 | All | All | All |
| Operating System | Huawei | Netengine16ex Firmware | v200r007c00 | All | All | All |
| Hardware | Huawei | Nip6300 | - | All | All | All |
| Hardware | Huawei | Nip6300 | - | All | All | All |
| Operating System | Huawei | Nip6300 Firmware | v500r001c30 | All | All | All |
| Operating System | Huawei | Nip6300 Firmware | v500r001c30 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Insufficient Input Validation Vulnerability in Some Huawei Products | CONFIRM | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 43890 Huawei Router Insufficient Input Validation Vulnerability (Huawei-SA-20171215-01-ike-en)