Path Traversal in Huawei Espace 7910
CVE-2017-17223
Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload and download files and cause information leak and system crash.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.020 (80.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 81st percentile — 80.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.020 · newest: 0.020 · change: 0.000
Affected products
- Huawei Espace 7910
- Huawei Espace 7910 Firmware — versions v200r003c30
- Huawei Espace 7950
- Huawei Espace 7950 Firmware — versions v200r003c30
- Huawei Espace 8950
- Huawei Espace 8950 Firmware — versions v200r003c00, v200r003c30
- Huawei Technologies Co., Ltd. Espace 7910; 7950; 8950 — versions eSpace 7910 V200R003C30, V200R003C30, eSpace 8950 V200R003C00
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2017-17223?
- CVE-2017-17223 is a high-severity vulnerability in Huawei Espace 7910, classified under Path Traversal. CVSS score: 8.8/10. Published 2018-03-09.
- How severe is CVE-2017-17223?
- High severity. CVSS v3 base score is 8.8 out of 10.