Vulnerabilities

Summary — last 7 days

New vulnerabilities2,856▼ 216 vs. last week

Critical / high1,332▼ 166 vs. last week

New active exploitation (KEV)6▼ 1 vs. last week

Unscored (no CVSS)223▼ 98 vs. last week

4 results, sorted by published date (most recent first)

CVE	Status	Severity	EPSS	Active exploitation	Affected technologies	Published ▼	Modified	Description
CVE-2017-17223	Modified	High (8.8)	2.0%	—	Huawei Espace 7910 Firmware Huawei Espace 7950 Firmware Huawei Espace 8950 Firmware	3/9/2018	6/17/2026	Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload and download files and…
CVE-2017-17222	Modified	High (8.8)	1.2%	—	Huawei Espace 7950 Firmware Huawei Espace 8950 Firmware	3/9/2018	6/17/2026	Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient verification of the…
CVE-2017-17221	Modified	High (8.8)	1.2%	—	Huawei Espace 7950 Firmware Huawei Espace 8950 Firmware	3/9/2018	6/17/2026	Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient verification of the packets,…
CVE-2015-8230	Modified	High (7.5)	1.0%	—	Huawei Espace 8950	1/11/2016	6/17/2026	Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of crafted ARP packets.