Huawei HG8045Q Firmware vulnerabilities

2 CVEs affecting Huawei HG8045Q Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-37028, published 2021-08-13.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-7900, published 2019-01-02. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG device by exploiting this vulnerability.
• CVE-2021-37028, published 2021-08-13. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. There is a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is disabled by default, attackers with administrator privilege could execute part…