Huawei b2338-168 Firmware vulnerabilities

2 CVEs affecting Huawei b2338-168 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8156, published 2017-11-22.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-8155, published 2017-11-22. High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days. The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the network between the indoor and outdoor…
• CVE-2017-8156, published 2017-11-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can access the serial port on the circuit…