Huawei s5700 Firmware vulnerabilities

44 CVEs affecting Huawei s5700 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-37129, published 2021-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2800, published 2017-06-08. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows…
CVE-2014-5394, published 2018-01-08. Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.
CVE-2016-8786, published 2018-03-09. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00,…
CVE-2019-5285, published 2019-06-04. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient…
CVE-2017-17300, published 2018-02-15. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V200R008C00, V200R009C00, S6700 V200R008C00, V200R009C00, S7700 V200R008C00, V200R009C00, S9700 V200R008C00, V200R009C00 have a numeric…
CVE-2016-4087, published 2016-05-23. High severity, CVSS 8.1. EPSS: 1.5% chance of exploitation in the next 30 days. Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of…
CVE-2014-4705, published 2018-01-30. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200,…
CVE-2016-3678, published 2016-04-11. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.
CVE-2017-15324, published 2017-12-22. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (NQA) packets. A remote attacker could exploit this…
CVE-2016-6518, published 2016-09-26. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of…

Latest

CVE-2021-37129, published 2021-10-27. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify input parameter. Successful exploit could…
CVE-2021-22357, published 2021-08-23. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due to validating inputs insufficiently. Attackers can exploit this vulnerability by sending…
CVE-2021-22329, published 2021-06-29. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to…
CVE-2021-22377, published 2021-06-22. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500. A module does not verify…
CVE-2021-22359, published 2021-05-27. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. There is a denial of service vulnerability in the verisions V200R005C00SPC500 of S5700 and V200R005C00SPC500 of S6700. An attacker could exploit this vulnerability by sending specific message to a…
CVE-2021-22321, published 2021-03-22. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious…
CVE-2020-1866, published 2021-01-13. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could…
CVE-2020-1810, published 2020-01-09. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm.…
CVE-2019-5304, published 2020-01-03. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation…
CVE-2019-5258, published 2019-12-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace…