Huawei Espace 7950 Firmware vulnerabilities

7 CVEs affecting Huawei Espace 7950 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7960, published 2018-11-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-17223, published 2018-03-09. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the…
CVE-2017-17222, published 2018-03-09. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and…
CVE-2017-17221, published 2018-03-09. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the…
CVE-2017-2722, published 2017-11-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02,…
CVE-2018-7958, published 2018-11-27. High severity, CVSS 7.4. EPSS: 1.1% chance of exploitation in the next 30 days. There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client…
CVE-2018-7960, published 2018-11-27. High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days. There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode.…
CVE-2018-7959, published 2018-11-27. Medium severity, CVSS 5.9. EPSS: 0.8% chance of exploitation in the next 30 days. There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables…