Huawei SRG1300 Firmware vulnerabilities

38 CVEs affecting Huawei SRG1300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19417, published 2020-07-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-15332, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-15331, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2014-4705, published 2018-01-30. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200,…
CVE-2017-15317, published 2017-12-22. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17296, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17257, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17256, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17252, published 2018-04-24. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17251, published 2018-04-24. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17258, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…

Latest

CVE-2019-19417, published 2020-07-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the…
CVE-2019-19416, published 2020-07-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the…
CVE-2019-19415, published 2020-07-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the…
CVE-2020-9071, published 2020-06-01. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker…
CVE-2019-5304, published 2020-01-03. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation…
CVE-2019-5291, published 2019-12-13. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the…
CVE-2019-5294, published 2019-11-13. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow…
CVE-2019-5293, published 2019-11-13. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages…
CVE-2019-5300, published 2019-06-04. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is…