Huawei UAP2105 prior V300R012C00SPC160 VxWorks Shell 7pk security

A vulnerability has been found in Huawei UAP2105 and classified as critical. Affected by this vulnerability is some unknown functionality of the component VxWorks Shell. Upgrading to version V300R012C00SPC160 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10819988	01/14/2021	VulD...	cvss2_nvd_basescore	7.2	nist.gov	01/14/2021	accepted	90
10819987	01/14/2021	VulD...	price_0day	$5k-$25k	see documentation	01/14/2021	accepted	90
10819986	01/14/2021	VulD...	person_name	Alexey Osipov/Alexander Zaitsev	securityfocus.com	01/14/2021	accepted	70
7136998	11/19/2019	VulD...	confirm_url	http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-452865.htm	www1.huawei.com	11/19/2019	accepted	100
7136997	11/19/2019	VulD...	person_nickname	Alex		11/19/2019	accepted	100
7136957	11/19/2019	VulD...	discoverydate	1441152000		11/19/2019	accepted	100
7137018	09/26/2017	VulD...	cvss3_nvd_basescore	6.8	nist.gov	09/26/2017	accepted	90
7137017	09/26/2017	VulD...	0day_days	754		09/26/2017	accepted	90
7137016	09/26/2017	VulD...	cvss3_vuldb_rc	X		09/26/2017	accepted	90
7137015	09/26/2017	VulD...	cvss3_vuldb_rl	O		09/26/2017	accepted	90
7137014	09/26/2017	VulD...	cvss3_vuldb_e	X		09/26/2017	accepted	90
7137013	09/26/2017	VulD...	cvss2_vuldb_rc	ND		09/26/2017	accepted	90
7137012	09/26/2017	VulD...	cvss2_vuldb_rl	OF		09/26/2017	accepted	90
7137011	09/26/2017	VulD...	cvss2_vuldb_e	ND		09/26/2017	accepted	90
7137010	09/26/2017	VulD...	location	Website		09/26/2017	accepted	90
7137009	09/26/2017	VulD...	securityfocus_title	Huawei UAP2105 'VxWorks shell' Local Command Injection Vulnerability	securityfocus.com	09/26/2017	accepted	100
7137008	09/26/2017	VulD...	securityfocus_class	Input Validation Error	securityfocus.com	09/26/2017	accepted	100
7137007	09/26/2017	VulD...	securityfocus_date	1441152000 (09/02/2015)	securityfocus.com	09/26/2017	accepted	100
7137006	09/26/2017	VulD...	securityfocus	76552	securityfocus.com	09/26/2017	accepted	100
7137005	09/26/2017	VulD...	cve_nvd_summary	Huawei UAP2105 before V300R012C00SPC160(BootRom) does not require authentication to the serial port or the VxWorks shell.	mitre.org	09/26/2017	accepted	100