Privilege escalation

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%

JSON

VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system.

CPENameOperatorVersion
vcm5010_firmwareeq< v100r2c50spc100

CPE	Name	Operator	Version
	vcm5010_firmware	eq	< v100r2c50spc100

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en

www.securityfocus.com/bid/97231