CVE-2017-8167

HIGH

Huawei USG9500 Firmware V500R001C50 - Denial of Service via Malformed IKE Packets

Title source: llm

Description

Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulnerability by sending malformed IKE packets to the target device. Successful exploit of the vulnerability could cause the device to restart.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-firewall-en

Scores

CVSS v3 7.5

EPSS 0.0028

EPSS Percentile 51.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-20

Status published

Products (2)

huawei/usg9500_firmware v500r001c50

Huawei Technologies Co., Ltd./USG9500 V500R001C50

Published Nov 22, 2017

Tracked Since Feb 18, 2026