Improper input validation in Huawei Dp300
CVE-2017-2722
DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R00…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.012 (65.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Huawei Dp300
- Huawei Dp300_firmware — versions v500r002c00
- Huawei Ecns210_td
- Huawei Ecns210_td_firmware — versions v100r004c10
- Huawei Espace_7950
- Huawei Espace_7950_firmware — versions v200r003c00, v200r003c30
- Huawei Espace_iad
- Huawei Espace_iad_firmware — versions v300r001c07spca00, v300r002c01spcb00
- Huawei Espace_u1981
- Huawei Espace_u1981_firmware — versions v100r001c20, v100r001c30, v200r003c00
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-2722?
- CVE-2017-2722 is a high-severity vulnerability in Huawei Dp300, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2017-11-22.
- How severe is CVE-2017-2722?
- High severity. CVSS v3 base score is 8.8 out of 10.