CVE-2017-17223: Path Traversal
First published: Fri Mar 09 2018(Updated: )
Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload and download files and cause information leak and system crash.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Espace 7910 Firmware | =v200r003c30 | |
| Huawei eSpace 7910 | ||
| Huawei Espace 7950 Firmware | =v200r003c30 | |
| Huawei eSpace 7950 | ||
| Huawei Espace 8950 Firmware | =v200r003c00 | |
| Huawei Espace 8950 Firmware | =v200r003c30 | |
| Huawei eSpace 8950 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-17223?
CVE-2017-17223 is a directory traversal vulnerability in Huawei eSpace 7910, eSpace 7950, and eSpace 8950.
How does CVE-2017-17223 impact affected products?
CVE-2017-17223 allows an authenticated, remote attacker to upload and download arbitrary files on the affected Huawei eSpace devices.
What is the severity of CVE-2017-17223?
The severity of CVE-2017-17223 is rated as high with a CVSS score of 8.8.
How can I fix the directory traversal vulnerability in Huawei eSpace devices?
To fix the vulnerability, apply the necessary patches or updates provided by Huawei.
Where can I find more information about CVE-2017-17223?
You can find more information about CVE-2017-17223 on the official Huawei security advisory page at http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-02-espace-en.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/huawei
- canonical/huawei espace 7910 firmware
- version/huawei espace 7910 firmware/v200r003c30
- canonical/huawei espace 7910
- canonical/huawei espace 7950 firmware
- version/huawei espace 7950 firmware/v200r003c30
- canonical/huawei espace 7950
- canonical/huawei espace 8950 firmware
- version/huawei espace 8950 firmware/v200r003c00
- version/huawei espace 8950 firmware/v200r003c30
- canonical/huawei espace 8950