Huawei HG532E vulnerabilities

2 CVEs affecting Huawei HG532E, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-12695, published 2020-06-08.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7254, published 2015-11-07. Medium severity, CVSS 5.0. EPSS: 27.5% chance of exploitation in the next 30 days. Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. (dot dot) in an icon/ URI.
• CVE-2020-12695, published 2020-06-08. High severity, CVSS 7.5. EPSS: 15.2% chance of exploitation in the next 30 days. The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully…