CVE-2017-17160 Memory corruption in AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,NetEngine16EX,SRG1300,SRG2300,SRG3300
Remote unauthenticated attackers can cause a denial of service on Huawei AR routers by sending malicious IKE packets that trigger a buffer overflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-17160?
CVE-2017-17160 is a medium-severity memory corruption vulnerability in Huawei Ar3200 Firmware, published on 15 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C02, AR200 V200R006C10, V200R007C00, AR200-S V200R006C10, V200R007C00, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C02, AR2200-S V200R006C10, V200R007C00, V200R008C20, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C02, AR3600 V200R006C10, V200R007C00, AR510 V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, NetEngine16EX V200R006C10, V200R007C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, SRG2300 V200R006C10, V200R007C00, V200R007C02, SRG3300 V200R006C10, V200R007C00 have a buffer overflow vulnerability due to incomplete range checks of the input data. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious IKE packets to the targeted device. An exploit could allow the attacker to cause the device to write out of bound and restart.
Weakness: CWE-787
Which versions are affected by CVE-2017-17160?
It affects 17 products.
Products include Huawei Ar120-S Firmware, Huawei Ar1200-S Firmware, Huawei Ar1200 Firmware, Huawei Ar150-S Firmware, Huawei Ar150 Firmware, Huawei Ar160 Firmware and 11 more.
How do I fix CVE-2017-17160?
No fix has been published for CVE-2017-17160 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-17160 being exploited?
There is no known exploitation of CVE-2017-17160 in the wild and no public exploit code.
Other vulnerabilities in Huawei Ar3200 Firmware
- CVE-2017-17301 Weak cryptography in AR120-S,AR1200,AR1200-S,AR150,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,CloudEngine 12800,CloudEngine 5800,CloudEngine 6800,CloudEngine 7800,DP300,SMC2.0,SRG1300,SRG2300,SRG3300,TE30,TE60,VP9660,ViewPoint 8660,eSpace IAD,eSpace U1981,eSpace USM
- CVE-2019-19415 Denial of service in AR120-S
- CVE-2019-19416 Denial of service in AR120-S
- CVE-2019-19417 Denial of service in AR120-S
- CVE-2019-5304 Denial of service in AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;IPS Module;NGFW Module;NIP6300;NIP6600;NetEngine16EX;S5700;S6700;SRG1300;SRG2300;SRG3300;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600
Sources
Also known as GHSA-p3gr-8h6r-849h.