Unscored CVE-2017-2736 EUVD-2017-11879GHSA-gfr3-86vc-g2m4

VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validati…

Published Nov 22, 2017 · Updated Sep 16, 2024 · Assigned by huawei

Vendor: Huawei Product: VCM5010 Category: Network devices

Description

VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack.

Affected products

Vendor	Product	Affected	Fixed
Huawei Technologies	VCM5010	Versions earlier before V100R002C50SPC100	—

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en
97231 vdb-entry