CVE-2017-17215 — HIGH (8.8)

Vulnerability Description

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Huawei	Hg532 Firmware	-
Huawei	Hg532	-

Related Weaknesses (CWE)

CWE-20

References

http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-enMitigationVendor Advisory
http://www.securityfocus.com/bid/102344Third Party AdvisoryVDB Entry
http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-enMitigationVendor Advisory
http://www.securityfocus.com/bid/102344Third Party AdvisoryVDB Entry

FAQ

What is CVE-2017-17215?

CVE-2017-17215 is a vulnerability with a CVSS score of 8.8 (HIGH). Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could l...

How severe is CVE-2017-17215?

CVE-2017-17215 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-17215?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Hg532 Firmware, Huawei Hg532.