Directory Traversal Vulnerability in Huawei eSpace Products
CVE-2017-17223

8.8HIGH

Key Information:

Vendor
McAfee
Status
Espace 7910; Espace 7950; Espace 8950
Vendor
CVE Published:
9 March 2018

Summary

The Huawei eSpace 7910, 7950, and 8950 series have a vulnerability that allows authenticated remote attackers to conduct directory traversal attacks. This issue arises from insufficient verification of specific URLs, enabling attackers to upload and download files, leading to potential information disclosure and system instability. Organizations using affected Huawei eSpace products should take immediate action to mitigate risks associated with this vulnerability.

Affected Version(s)

eSpace 7910; eSpace 7950; eSpace 8950 eSpace 7910 V200R003C30

eSpace 7910; eSpace 7950; eSpace 8950 eSpace 7950 V200R003C30

eSpace 7910; eSpace 7950; eSpace 8950 eSpace 8950 V200R003C00

References

http://www.huawei.com/en/psirt/security-advisories/2018/h...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.