Huawei Espace Desktop vulnerabilities

5 CVEs affecting Huawei Espace Desktop, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7976, published 2018-06-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-9416, published 2014-12-24. Medium severity, CVSS 4.4. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1)…
CVE-2014-9417, published 2014-12-24. Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days. The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted image.
CVE-2014-9418, published 2014-12-24. Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days. The eSpace Meeting ActiveX control (eSpaceStatusCtrl.dll) in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service (memory overflow) via unspecified vectors.
CVE-2014-9415, published 2014-12-24. Low severity, CVSS 1.9. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted QES file.
CVE-2018-7976, published 2018-06-01. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. There is a stored cross-site scripting (XSS) vulnerability in Huawei eSpace Desktop V300R001C00 and V300R001C50 version. Due to the insufficient validation of the input, an authenticated, remote…