Huawei AR3600 Firmware vulnerabilities

31 CVEs affecting Huawei AR3600 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19417, published 2020-07-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-17296, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17257, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17256, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17252, published 2018-04-24. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17251, published 2018-04-24. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17258, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17255, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17254, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17253, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17299, published 2018-02-15. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02,…

Latest

CVE-2019-19417, published 2020-07-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the…
CVE-2019-19416, published 2020-07-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the…
CVE-2019-19415, published 2020-07-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the…
CVE-2020-9071, published 2020-06-01. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker…
CVE-2019-5304, published 2020-01-03. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation…
CVE-2019-5259, published 2019-12-16. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can…
CVE-2019-5291, published 2019-12-13. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the…
CVE-2019-5294, published 2019-11-13. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow…
CVE-2019-5293, published 2019-11-13. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages…