Huawei s3700 Firmware vulnerabilities

4 CVEs affecting Huawei s3700 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17141, published 2018-03-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2808, published 2015-04-01. Low severity, CVSS 3.7. EPSS: 73.9% chance of exploitation in the next 30 days. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to…
CVE-2014-5394, published 2018-01-08. Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
CVE-2015-3913, published 2017-06-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.
CVE-2017-17141, published 2018-03-05. Low severity, CVSS 3.7. EPSS: 0.7% chance of exploitation in the next 30 days. Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00;…