CVE-2017-17215
🗓️ 20 Mar 2018 15:00:00Reported by huaweiType 
cve🔗 web.nvd.nist.gov📰️ 16 Media mentions👁 594 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 45 |
|---|---|---|---|---|
 | Exploit for Improper Input Validation in Huawei Hg532_Firmware | 17 Nov 202011:22 | – | githubexploit |
 | CVE-2017-17215 | 20 Mar 201800:00 | – | attackerkb |
 | The vulnerability of Huawei HG532 Wi-Fi routers’ microprogramming software lies in insufficient validation of input data, allowing a hacker to execute arbitrary codes. | 28 Apr 202200:00 | – | bdu_fstec |
 | CVE-2017-17215 | 2 Jan 201809:34 | – | circl |
 | Huawei HG532 Series Router Remote Code Execution Vulnerability | 25 Dec 201700:00 | – | cnvd |
 | Huawei HG532 Router Remote Code Execution (CVE-2017-17215) | 27 Nov 201700:00 | – | checkpoint_advisories |
 | CVE-2017-17215 | 20 Mar 201815:00 | – | cvelist |
 | Huawei Router HG532 - Arbitrary Command Execution | 25 Dec 201700:00 | – | exploitdb |
 | Security Notice - Statement on Remote Code Execution Vulnerability in Huawei HG532 Product | 30 Nov 201700:00 | – | huawei |
 | Huawei HG532e Home Gateway Command Injection | 11 Dec 201700:00 | – | nessus |
10
Node
AND
[
{
"product": "HG532",
"vendor": "Huawei Technologies Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "customized versions"
}
]
}
]| Source | Link |
|---|---|
| securityfocus | www.securityfocus.com/bid/102344 |
| huawei | www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-en |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| NewStatusURL | request body | /ctrlt/DeviceUpgrade_1 | Remote command injection via UPnP TR-064 DeviceUpgrade_1 service; injection in NewStatusURL and NewDownloadURL allows remote code execution. | CWE-20 |
| NewDownloadURL | request body | /ctrlt/DeviceUpgrade_1 | Remote command injection via UPnP TR-064 DeviceUpgrade_1 service; injection in NewStatusURL and NewDownloadURL allows remote code execution. | CWE-20 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:10Current
8.6High risk
Vulners AI Score8.6
CVSS 26.5
CVSS 38.8
EPSS0.78278