Path Traversal in Huawei Espace 7910
CVE-2017-17223
Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload and download files and cause information leak and system crash.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.020 (79.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Huawei Espace_7910
- Huawei Espace_7910_firmware — versions v200r003c30
- Huawei Espace_7950
- Huawei Espace_7950_firmware — versions v200r003c30
- Huawei Espace_8950
- Huawei Espace_8950_firmware — versions v200r003c00, v200r003c30
- Huawei Technologies Co., Ltd. Espace 7910; 7950; 8950 — versions eSpace 7910 V200R003C30, V200R003C30, eSpace 8950 V200R003C00
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-17223?
- CVE-2017-17223 is a high-severity vulnerability in Huawei Espace 7910, classified under Path Traversal. CVSS score: 8.8/10. Published 2018-03-09.
- How severe is CVE-2017-17223?
- High severity. CVSS v3 base score is 8.8 out of 10.