Huawei s1700 Firmware vulnerabilities

13 CVEs affecting Huawei s1700 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-37129, published 2021-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5285, published 2019-06-04. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient…
CVE-2017-8147, published 2017-11-22. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200…
CVE-2019-19397, published 2019-12-13. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.
CVE-2021-22321, published 2021-03-22. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious…
CVE-2017-17141, published 2018-03-05. Low severity, CVSS 3.7. EPSS: 0.7% chance of exploitation in the next 30 days. Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00;…
CVE-2021-37129, published 2021-10-27. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify input parameter. Successful exploit could…
CVE-2017-15346, published 2018-02-15. Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days. XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00,…
CVE-2017-15333, published 2018-02-15. Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days. XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00,…
CVE-2021-22329, published 2021-06-29. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to…
CVE-2017-17135, published 2018-03-05. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200…

Latest

CVE-2017-17138, published 2018-03-05. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00;…
CVE-2017-17137, published 2018-03-05. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200…
CVE-2017-17136, published 2018-03-05. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200…