Huawei Utps Firmware vulnerabilities

2 CVEs affecting Huawei Utps Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-8769, published 2017-04-02.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-8769, published 2017-04-02. Medium severity, CVSS 6.7. EPSS: 1.6% chance of exploitation in the next 30 days. Huawei UTPS earlier than UTPS-V200R003B015D16SPC00C983 has an unquoted service path vulnerability which can lead to the truncation of UTPS service query paths. An attacker may put an executable file…
• CVE-2016-2780, published 2016-04-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an…