High severity8.8NVD Advisory· Published Nov 22, 2017· Updated May 13, 2026

CVE-2017-2737

Description

VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system.

Affected products

Huawei Technologies Co., Ltd./VCM5010v5
Range: Versions earlier before V100R002C50SPC100
Huawei/Vcm5010 Firmware
cpe:2.3:o:huawei:vcm5010_firmware:*:*:*:*:*:*:*:*
Range: <v100r002c50spc100

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-ennvdVendor Advisory
www.securityfocus.com/bid/97231nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000