Huawei Ar 19/29/49 vulnerabilities

4 CVEs affecting Huawei Ar 19/29/49, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-6571, published 2013-06-20.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-4960, published 2013-06-20. Medium severity, CVSS 6.5. EPSS: 3.5% chance of exploitation in the next 30 days. The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700,…
• CVE-2012-6569, published 2013-06-20. High severity, CVSS 9.3. EPSS: 2.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100,…
• CVE-2012-6570, published 2013-06-20. High severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days. The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches…
• CVE-2012-6571, published 2013-06-20. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses…