Vulnerability Intelligence Report
CVE-2017-2736
VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack.
No Active Exploit Signals
CVSS Base Score
7.2
HIGH
EPSS Probability:1.37%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Huawei Technologies Co., Ltd. | VCM5010 | Versions earlier before V100R002C50SPC100 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.370%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Huawei Technologies · Vendor · China |
| Reserved | 2016-12-01T00:00:00 |
| Published | 2017-11-22T19:00:00 |
| Patch Date | 2017-11-15 |
| Last Updated | 2024-09-16T18:19:02 |
Community Chatter & Buzz