CVE-2017-2736

CWE-77 — Command Injection3 documents3 sources
Severity
7.2HIGH
EPSS
1.2%
top 21.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Vcm5010 FirmwareHuawei Technologies Co., Ltd. Vcm5010
Timeline
PublishedNov 22
Latest updateMay 17

Description

VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/vcm5010_firmware< v100r002c50spc100
▶CVEListV5huawei_technologies_co.,_ltd./vcm5010Versions earlier before V100R002C50SPC100

🔴Vulnerability Details

2
GHSA
GHSA-gfr3-86vc-g2m4: VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability↗2022-05-17
▶
CVEList
CVE-2017-2736: VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability↗2017-11-22
▶
CVE-2017-2736 (HIGH CVSS 7.2) | VCM5010 with software versions earl | cvebase.io