Huawei e585u-82 vulnerabilities

3 CVEs affecting Huawei e585u-82, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-5970, published 2012-12-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-5970, published 2012-12-19. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. The Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer dereference and device outage) via crafted HTTP requests, as demonstrated by unspecified…
CVE-2012-5969, published 2012-12-19. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify…
CVE-2012-5968, published 2012-12-19. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to…