PT-2017-18173
CVE-2017-8167
·
Publicado
2017-10-25
·
Atualizado
2017-12-12
Descrição por
CVSS 2.0
7.8
AltaMétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Huawei firewall products USG9500 version V500R001C50
Description
The issue is related to a DoS vulnerability that can be exploited by a remote attacker who controls the peer device. The attacker can send
malformed IKE packets to the target device, which could cause the device to restart due to insufficient input validation.Recommendations
For Huawei firewall products USG9500 version V500R001C50, consider restricting access to the device to minimize the risk of exploitation until a fix is available. As a temporary workaround, avoid using the IKE protocol in the affected device until the issue is resolved.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾