HTTP: Huawei HG532 CVE-2017-17215 Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Huawei HG532. A successful attack can lead to arbitrary code execution.

Extended Description

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code.

Short Name
HTTP:HUAWEI-CVE-2017-17215-RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2017-17215 Code Execution HG532 Huawei Remote bid:102344
Release Date
01/18/2018
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3716
False Positive
Unknown
CVSS Score

6.5

Found a potential security threat?