Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before…

Published 8 y ago 2018-04-30 · modified 4 mo ago 2026-06-17 · JSON

CVSS

6.5

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.4%

percentile 30%

Public exploits

none known

Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before E5771h-937TCPU-V200R001B329D05SP00C1308 have a Denial of Service (DoS) vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a DoS attack by exploiting this vulnerability.

Exploit prediction (EPSS)

0.36% probability of exploitation in the next 30 days, higher than 30% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	6.5	`CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
NVD	2.0	6.1	`AV:A/AC:L/Au:N/C:N/I:N/A:C`

Affected products

Huawei Technologies Co., Ltd. E5771h-937

Classification

Weakness

CWE-20 Improper Input Validation

References

huawei.com /en/psirt/security-advisories/huawei-sa-20180428-01-mbb-en · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-17318
NVD: CVE-2017-17318

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.