Huawei Espace Iad Firmware vulnerabilities

3 CVEs affecting Huawei Espace Iad Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17301, published 2018-02-15.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-2722, published 2017-11-22. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02,…
• CVE-2017-17301, published 2018-02-15. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10,…
• CVE-2016-8271, published 2017-04-02. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL.