CVE-2017-17156: Huawei Ips Module Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NIP6600 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, Secospace USG6300 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, Secospace USG6600 V500R001C00, V500R001C00SPC100, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC301, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200PWE, V500R001C20SPC300, V500R001C20SPC300B078, V500R001C20SPC300PWE, USG9500 V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC303, V500R001C00SPC500, V500R001C00SPC500PWE, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC101, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE has an out-of-bounds memory access vulnerability due to insufficient input validation. An attacker could exploit it to craft special packets to trigger out-of-bounds memory access, which may further lead to system exceptions.

Affected products

• Huawei Ips Module Firmware: version v500r001c00 only; version v500r001c00spc200 only; version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00sph303 only; version v500r001c00sph508 only; …
• Huawei Ngfw Module Firmware: version v500r001c00 only; version v500r001c00spc200 only; version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00spc500pwe only; version v500r001c00sph303 only; …
• Huawei NIP6300 Firmware: version v500r001c00 only; version v500r001c00spc200 only; version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00sph303 only; version v500r001c00sph508 only; …
• Huawei NIP6600 Firmware: version v500r001c00 only; version v500r001c00spc200 only; version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00sph303 only; version v500r001c00sph508 only; …
• Huawei Secospace USG6300 Firmware: version v500r001c00 only; version v500r001c00spc200 only; version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00spc500pwe only; version v500r001c00sph303 only; …
• Huawei Secospace USG6500 Firmware: version v500r001c00 only; version v500r001c00spc200 only; version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00spc500pwe only; version v500r001c00sph303 only; …
• Huawei Secospace USG6600 Firmware: version v500r001c00 only; version v500r001c00spc100 only; version v500r001c00spc200 only; version v500r001c00spc300 only; version v500r001c00spc301 only; version v500r001c00spc500 only; …
• Huawei USG9500 Firmware: version v500r001c00 only; version v500r001c00spc200 only; version v500r001c00spc300 only; version v500r001c00spc303 only; version v500r001c00spc500 only; version v500r001c00spc500pwe only; …

Published 2018-02-15. Last modified 2026-06-17.