Huawei AC6605 Firmware vulnerabilities

4 CVEs affecting Huawei AC6605 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8147, published 2017-11-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-6824, published 2016-09-22. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP…
CVE-2017-8147, published 2017-11-22. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200…
CVE-2014-8572, published 2017-04-02. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and…
CVE-2017-2700, published 2017-11-22. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS…