High severity8.8NVD Advisory· Published Nov 22, 2017· Updated Jun 17, 2026

CVE-2017-2737

Description

VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Huawei/Vcm5010 Firmware
cpe:2.3:o:huawei:vcm5010_firmware:*:*:*:*:*:*:*:*
Range: <v100r002c50spc100
Huawei Technologies Co., Ltd./VCM5010v5
Range: Versions earlier before V100R002C50SPC100

Patches

Vulnerability mechanics

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-ennvdVendor Advisory
www.securityfocus.com/bid/97231nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000