CVE-2017-17305: Huawei USG2205BSR Firmware

Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days.

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability can impact IPSec tunnel security.

Affected products

• Huawei USG2205BSR Firmware: version v300r001c10spc600 only
• Huawei USG2220BSR Firmware: version v300r001c00 only
• Huawei USG5120BSR Firmware: version v300r001c00 only
• Huawei USG5150BSR Firmware: version v300r001c00 only

Published 2018-08-21. Last modified 2026-06-17.