Vulnerability in Huawei Secospace Usg6600
CVE-2017-17162
Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attacker execute special commands many times. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.
EPSS: 0.002 (11.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Huawei Secospace_usg6600
- Huawei Secospace_usg6600_firmware — versions v500r001c30spc100, v500r001c30spc200, v500r001c30spc300
- Huawei Usg9500
- Huawei Usg9500_firmware — versions v500r001c30spc100, v500r001c30spc200, v500r001c30spc300
- Huawei Technologies Co., Ltd. Secospace Usg6600, Usg9500, Usg9500 — versions Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-17162?
- CVE-2017-17162 is a medium-severity vulnerability in Huawei Secospace Usg6600, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 5.5/10. Published 2018-02-15.
- How severe is CVE-2017-17162?
- Medium severity. CVSS v3 base score is 5.5 out of 10.