CVE-2017-17137: Huawei DP300 Firmware

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service.

Affected products

  • Huawei DP300 Firmware: version v500r002c00 only
  • Huawei Ips Module Firmware: version v500r001c00 only; version v500r001c30 only
  • Huawei Ngfw Module Firmware: version v500r001c00 only; version v500r002c00 only
  • Huawei NIP6300 Firmware: version v500r001c00 only; version v500r001c30 only
  • Huawei NIP6600 Firmware: version v500r001c00 only; version v500r001c30 only
  • Huawei RP200 Firmware: version v500r002c00 only; version v600r006c00 only
  • Huawei s12700 Firmware: version v200r007c00 only; version v200r007c01 only; version v200r008c00 only; version v200r009c00 only; version v200r010c00 only
  • Huawei s1700 Firmware: version v200r006c10 only; version v200r009c00 only; version v200r010c00 only
  • Huawei s2700 Firmware: version v200r006c10 only; version v200r007c00 only; version v200r008c00 only; version v200r009c00 only; version v200r010c00 only
  • Huawei s5700 Firmware: version v200r006c00 only; version v200r007c00 only; version v200r008c00 only; version v200r009c00 only; version v200r010c00 only
  • Huawei s6700 Firmware: version v200r008c00 only; version v200r009c00 only; version v200r010c00 only
  • Huawei s7700 Firmware: version v200r007c00 only; version v200r008c00 only; version v200r009c00 only; version v200r010c00 only
  • Huawei s9700 Firmware: version v200r007c00 only; version v200r007c01 only; version v200r008c00 only; version v200r009c00 only; version v200r010c00 only
  • Huawei Secospace USG6300 Firmware: version v500r001c00 only; version v500r001c30 only
  • Huawei Secospace USG6500 Firmware: version v500r001c00 only; version v500r001c30 only
  • Huawei Secospace USG6600 Firmware: version v500r001c00 only; version v500r001c30s only
  • Huawei TE30 Firmware: version v100r001c02 only; version v100r001c10 only; version v500r002c00 only; version v600r006c00 only
  • Huawei TE40 Firmware: version v500r002c00 only; version v600r006c00 only
  • Huawei TE50 Firmware: version v500r002c00 only; version v600r006c00 only
  • Huawei TE60 Firmware: version v100r001c02 only; version v100r001c10 only; version v500r002c00 only; version v600r006c00 only
  • Huawei TP3106 Firmware: version v100r002c00 only
  • Huawei TP3206 Firmware: version v100r002c00 only; version v100r002c10 only
  • Huawei USG9500 Firmware: version v500r001c00 only; version v500r001c30 only
  • Huawei Viewpoint 9030 Firmware: version v100r011c02 only; version v100r011c03 only

Published 2018-03-05. Last modified 2026-06-17.