Unscored CVE-2017-2737 EUVD-2017-11880GHSA-9wx5-w654-3m84

VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate …

Published Nov 22, 2017 · Updated Sep 16, 2024 · Assigned by huawei

Vendor: Huawei Product: VCM5010 Category: Network devices

Description

VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system.

Affected products

Vendor	Product	Affected	Fixed
Huawei Technologies	VCM5010	Versions earlier before V100R002C50SPC100	—

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en
97231 vdb-entry