Huawei UAP2105 prior V300R012C00SPC160 VxWorks Shell 7pk security

entryeditHistoryDiffjsonxmlCTI

A vulnerability has been found in Huawei UAP2105 and classified as critical. Affected by this vulnerability is some unknown functionality of the component VxWorks Shell. Upgrading to version V300R012C00SPC160 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

IDCommitedUserFieldChangeRemarksModeratedReasonC
1081998801/14/2021VulD...cvss2_nvd_basescore7.2nist.gov01/14/2021accepted90
1081998701/14/2021VulD...price_0day$5k-$25ksee documentation01/14/2021accepted90
1081998601/14/2021VulD...person_nameAlexey Osipov/Alexander Zaitsevsecurityfocus.com01/14/2021accepted70
713699811/19/2019VulD...confirm_urlhttp://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-452865.htmwww1.huawei.com11/19/2019accepted100
713699711/19/2019VulD...person_nicknameAlex11/19/2019accepted100
713695711/19/2019VulD...discoverydate144115200011/19/2019accepted100
713701809/26/2017VulD...cvss3_nvd_basescore6.8nist.gov09/26/2017accepted90
713701709/26/2017VulD...0day_days75409/26/2017accepted90
713701609/26/2017VulD...cvss3_vuldb_rcX09/26/2017accepted90
713701509/26/2017VulD...cvss3_vuldb_rlO09/26/2017accepted90
713701409/26/2017VulD...cvss3_vuldb_eX09/26/2017accepted90
713701309/26/2017VulD...cvss2_vuldb_rcND09/26/2017accepted90
713701209/26/2017VulD...cvss2_vuldb_rlOF09/26/2017accepted90
713701109/26/2017VulD...cvss2_vuldb_eND09/26/2017accepted90
713701009/26/2017VulD...locationWebsite09/26/2017accepted90
713700909/26/2017VulD...securityfocus_titleHuawei UAP2105 'VxWorks shell' Local Command Injection Vulnerabilitysecurityfocus.com09/26/2017accepted100
713700809/26/2017VulD...securityfocus_classInput Validation Errorsecurityfocus.com09/26/2017accepted100
713700709/26/2017VulD...securityfocus_date1441152000 (09/02/2015)securityfocus.com09/26/2017accepted100
713700609/26/2017VulD...securityfocus76552securityfocus.com09/26/2017accepted100
713700509/26/2017VulD...cve_nvd_summaryHuawei UAP2105 before V300R012C00SPC160(BootRom) does not require authentication to the serial port or the VxWorks shell.mitre.org09/26/2017accepted100

Do you want to use VulDB in your project?

Use the official API to access entries easily!