Vulnerability in Huawei Secospace Usg6600
CVE-2017-17162
Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attacker execute special commands many times. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.002 (9.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 10th percentile — 9.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Huawei Secospace Usg6600
- Huawei Secospace Usg6600 Firmware — versions v500r001c30spc100, v500r001c30spc200, v500r001c30spc300
- Huawei Usg9500
- Huawei Usg9500 Firmware — versions v500r001c30spc100, v500r001c30spc200, v500r001c30spc300
- Huawei Technologies Co., Ltd. Secospace Usg6600, Usg9500, Usg9500 — versions Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2017-17162?
- CVE-2017-17162 is a medium-severity vulnerability in Huawei Secospace Usg6600, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 5.5/10. Published 2018-02-15.
- How severe is CVE-2017-17162?
- Medium severity. CVSS v3 base score is 5.5 out of 10.