CVE-2017-17138· NVD / CVE Program· CNA huawei

PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30

PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; V200R009C00; V200R010C00; S2700 V200R006C10; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S5700 V200R006C00; V200R007C00; V200R008C00; V200R009C00; V200R010C00; S6700 V200R008C00; V200R009C00; V200R010C00; S7700 V200R007C00; V200R008C00; V200R009C00; V200R010C00; S9700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; Secospace USG6300 V500R001C00; V500R001C30; Secospace USG6500 V500R001C00; V500R001C30; Secospace USG6600 V500R001C00; V500R001C30S; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00; TP3106 V100R002C00; TP3206 V100R002C00; V100R002C10; USG9500 V500R001C00; V500R001C30; ViewPoint 9030 V100R011C02; V100R011C03 has a DoS vulnerability in PEM module of Huawei products due to insufficient verification. An authenticated local attacker can make processing into deadloop by a malicious certificate. The attacker can exploit this vulnerability to cause a denial of service.

MediumCVSS 5.5 · v3.0—No exploit No fix recorded

Denial of service

Published: Mar 5, 2018
Updated: Jun 16, 2026
EPSS: 0.1% · 2th percentile
CWE: CWE-20

Follow this CVE

Report tools

JSON

Action score

Monitor

Low priority for now.

CVSS: 22 / 40 · 5.5 / 10
CISA KEV: 0 / 30 · Not listed
EPSS: 0 / 30 · 0.1%

Affected systems

Vendor	Product	CPE
huawei	dp300 firmware	cpe:2.3:o:huawei:dp300_firmware
huawei	dp300	cpe:2.3:h:huawei:dp300
huawei	ips module firmware	cpe:2.3:o:huawei:ips_module_firmware
huawei	ips module	cpe:2.3:h:huawei:ips_module
huawei	ngfw module firmware	cpe:2.3:o:huawei:ngfw_module_firmware
huawei	ngfw module	cpe:2.3:h:huawei:ngfw_module
huawei	nip6300 firmware	cpe:2.3:o:huawei:nip6300_firmware
huawei	nip6300	cpe:2.3:h:huawei:nip6300
huawei	nip6600 firmware	cpe:2.3:o:huawei:nip6600_firmware
huawei	nip6600	cpe:2.3:h:huawei:nip6600
huawei	rp200 firmware	cpe:2.3:o:huawei:rp200_firmware
huawei	rp200	cpe:2.3:h:huawei:rp200

and 36 more

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

huawei dp300 firmwarev500r002c00
huawei ips module firmwarev500r001c00
huawei ips module firmwarev500r001c30
huawei ngfw module firmwarev500r001c00
huawei ngfw module firmwarev500r002c00
huawei nip6300 firmwarev500r001c00
huawei nip6300 firmwarev500r001c30
huawei nip6600 firmwarev500r001c00
huawei nip6600 firmwarev500r001c30
huawei rp200 firmwarev500r002c00
huawei rp200 firmwarev600r006c00
huawei s12700 firmwarev200r007c00
huawei s12700 firmwarev200r007c01
huawei s12700 firmwarev200r008c00
huawei s12700 firmwarev200r009c00
huawei s12700 firmwarev200r010c00
huawei s1700 firmwarev200r006c10
huawei s1700 firmwarev200r009c00
huawei s1700 firmwarev200r010c00
huawei s2700 firmwarev200r006c10

Versions reported by the vendor

Affected version ranges reported by the assigning authority (huawei). Independent of NVD's CPE analysis and usually ahead of it.

Huawei Technologies Co., Ltd. DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60; TP3106; TP32
- DP300 V500R002C00, IPS Module V500R001C00, V500R001C30, NGFW Module V500R001C00, V500R002C00, NIP6300 V500R001C00, NIP6600 V500R001C00, RP200 V500R002C00, V600R006C00, S12700 V200R007C00, V200R007C01, V200R008C00 … (+24)affected

Same product

huawei: all records

Other highest-scoring records for the same primary product.

CVE-2017-2722DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and
35Monitor
CVE-2017-17146Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation.
31Monitor
CVE-2017-17310Electronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00,
30Monitor
CVE-2017-15342Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100 have a denial of service vulnerability.
30Monitor
CVE-2017-17304The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages
26Monitor
CVE-2017-17170The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages
26Monitor

Remediation

Which version to upgrade to

Fix versions compiled from the vendor, package registries and Microsoft. Verify the vendor's note before upgrading.

No fix version is recorded for this entry. Check the references for vendor advisories.

Exploit status

No known public exploit

No public exploit has been observed yet. That doesn't mean you're safe, only that the bar is a little higher.

Research context

For pentesters and researchers: attack profile, score disagreement, timeline, patch commits, credits, variant and chain candidates, bug bounty scope. All derived from existing data; no exploit code.

Timeline

From publication to today: proof of concept, Metasploit module, CISA KEV and fix record. Dates are as reported by the sources.

No dated events beyond publication.

EPSS, last 120 days

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Patch and commit links

Commit, PR and diff links among the references. A starting point for patch-diffing and variant hunting; fixes, not exploits.

No commit or PR link among the references.

Credits

All researchers

Finders, reporters and analysts named in the CNA record. Click a name for that researcher’s other records.

No credits in the CNA record.

Variant candidates

Same product, same weakness class, within 18 months. If the patch missed the root cause, the sibling bug is here.

No nightly-computed relations.

Chain candidates

An authentication bypass and a privilege-requiring bug in the same product, published close together: combined they may become an unauthenticated path.

—

Bug bounty scope

No known public program.

Source: bounty-targets-data (public HackerOne, Bugcrowd, Intigriti, YesWeHack listings).

Technical details

Attack conditions

Someone with local access to the system can trigger it.
A low-privileged account is enough.
No user action is required.
No special conditions are required; it is repeatable.

If successful

Confidentiality: none
Integrity: none
Availability: high · the service can be disrupted

Attack vector: Local
Attack complexity: Low
Privileges required: Low
User interaction: None
Scope: Unchanged
Confidentiality impact: None
Integrity impact: None
Availability impact: High

Weakness class (CWE)

CWE-20 · Improper Input Validation

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

nvd-primary

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

Attack patterns (CAPEC)

ATT&CK techniques

Noroxi analysis

No Noroxi analysis for this record yet

We don't hand-write analysis for all 385,000+ vulnerabilities; that wouldn't be honest. For notable, high-impact vulnerabilities our team writes the mechanism, detection and remediation steps.

We use this product, ask for help

Change log

No changes recorded on tracked fields yet. Score, KEV, exploit maturity and fix status changes appear here.

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-pem-en

Vendor advisories and official records. Exploit/PoC links are deliberately left out.

All records