CVE-2017-17215

Description

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code.

Affected products

Vendor	Product	Affected	Fixed
Huawei Technologies	HG532	customized versions	—

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

Huawei Router HG532 - Arbitrary Command Execution EDB-43414 · webapps · Dec 25, 2017

GitHub 4 repositories

1337g/CVE-2017-17215 ★ 26 · Dec 25, 2017

CVE-2017-17215 HuaWei Router RCE (NOT TESTED)
wilfred-wulbou/HG532d-RCE-Exploit ★ 9 · Nov 17, 2020

A Remote Code Execution (RCE) exploit for Huawei HG532d based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com
luel-4013/misfortune-cookie ★ 0 · Sep 7, 2026

This interactive suite targets CVE-2014-9222 (Misfortune Cookie) in legacy RomPager web servers, alongside modular testing for CVE-2017-17215 (Huawei HG532 RCE), CVE-2018-14847 (MikroTik WinBox crede…
ltfafei/HuaWei_Route_HG532_RCE_CVE-2017-17215 ★ 0 · Nov 2, 2022

POCsuite与goland实现华为HG532路由器命令注入CVE-2017-17215 POC

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packet…