Huawei Espace 8950 Firmware vulnerabilities

3 CVEs affecting Huawei Espace 8950 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17223, published 2018-03-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-17223, published 2018-03-09. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the…
CVE-2017-17222, published 2018-03-09. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and…
CVE-2017-17221, published 2018-03-09. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the…