CVE-2017-15348

Vulnerability

Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, and USG9500 V500R001C00 contain an insufficient input validation vulnerability (HWPSIRT-2017-04196). An unauthenticated, remote attacker can send specific MPLS Echo Request messages to the target products. The products fail to properly validate certain parameters in the messages, leading to a denial-of-service condition. [1]

Exploitation

The attacker requires no authentication and only network connectivity to the target device. By sending specially crafted MPLS Echo Request packets to an affected Huawei product, the insufficient input validation triggers a fault that causes the device to reset. The exact sequence of steps is limited to sending the malicious packets over the network. [1]

Impact

Successful exploitation results in a denial-of-service (DoS) condition, causing the targeted Huawei product to reset. This can lead to temporary loss of network security functions and potential network disruption. The impact is limited to device availability. [1]

Mitigation

Huawei has released software updates to fix this vulnerability. The resolved version for all affected products is V500R001C30SPC600. Customers should upgrade their affected products to this or a later version. No workarounds are provided in the available reference. [1]