CVE-2017-17223: Path Traversal
Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload and download files and cause information leak and system crash.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-17223?
CVE-2017-17223 is a directory traversal vulnerability in Huawei eSpace 7910, eSpace 7950, and eSpace 8950.
How does CVE-2017-17223 impact affected products?
CVE-2017-17223 allows an authenticated, remote attacker to upload and download arbitrary files on the affected Huawei eSpace devices.
What is the severity of CVE-2017-17223?
The severity of CVE-2017-17223 is rated as high with a CVSS score of 8.8.
How can I fix the directory traversal vulnerability in Huawei eSpace devices?
To fix the vulnerability, apply the necessary patches or updates provided by Huawei.
Where can I find more information about CVE-2017-17223?
You can find more information about CVE-2017-17223 on the official Huawei security advisory page at http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-02-espace-en.