CVE-2017-15348

Name: CVE-2017-15348
Creator: NVD / NIST
Published: 2018-02-15T16:29:01.143+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.34%

Last modified Jun 17, 2026

CVE-2017-15348 is a vulnerability of currently unknown severity. Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500 V500R001C00 have an insufficient input validation vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. EPSS estimates a 1.34% chance of exploitation in the next 30 days.

Description

Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500 V500R001C00 have an insufficient input validation vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

Metrics

EPSS Probability

1.34%

67.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions
Huawei	Ips Module Firmware	v500r001c00
Huawei	Ngfw Module Firmware	v500r001c00
Huawei	Nip6300 Firmware	v500r001c00
Huawei	Nip6600 Firmware	v500r001c00
Huawei	Secospace Usg6300 Firmware	v500r001c00
Huawei	Secospace Usg6600 Firmware	v500r001c00
Huawei	Usg9500 Firmware	v500r001c00
Huawei	Secospace Usg6500 Firmware	v500r001c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-routers-enVendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-routers-enVendor Advisory

Timeline

Published: Feb 15, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-15348?

How severe is CVE-2017-15348?

Severity scoring for CVE-2017-15348 is pending analysis. The EPSS model estimates a 1.34% probability of exploitation in the next 30 days.

How do I fix CVE-2017-15348?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-15348?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST