CVE-2017-17163Improper Restriction of Operations within the Bounds of a Memory Buffer in Technologies CO LTD Secospace Usg6600

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 94.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 15
Latest updateMay 14

Description

Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

NVDhuawei/secospace_usg6600_firmwarev500r001c30spc100

🔴Vulnerability Details

2
GHSA
GHSA-59rw-768x-rhf2: Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bounds memory access vulnerability due to insufficient verification2022-05-14
CVEList
CVE-2017-17163: Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bounds memory access vulnerability due to insufficient verification2018-02-15
CVE-2017-17163 — MEDIUM severity | cvebase