CVE-2017-17215

high · 8.8

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code.

8.8

CVSS

78.3%

EPSS (exploit prob.)

100th

EPSS percentile

2018-03-20

Published

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
huawei	hg532_firmware	all versions
huawei	hg532	all versions

Check a specific version with /api/v1/cve/match.

References

http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-en
http://www.securityfocus.com/bid/102344
http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-en
http://www.securityfocus.com/bid/102344

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-17215