CVE-2017-17215

—

CVSS 3.0

8.8 high

EPSS

78%p100

Published

Mar 20, 2018 (Mar 20, 2018)

Modified

Jun 17, 2026

Description

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code.

Vendors: huawei
Products: hg532 firmware
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (78.3%)

In the news20 stories

New Mirai botnet variant Murdoc Botnet targets AVTECH IP cameras and Huawei HG532 routers

Security AffairsJan 21, 16:41 UTC · Jan 21, 2025Malware CVE-2024-7029 CVE-2017-17215 CVE-2024-12856+3 CVEs

Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks

The Hacker NewsJan 8, 10:30 UTC · Jan 8, 2025Vulnerability in the wildCVE-2024-12856 CVE-2013-3307 CVE-2013-7471+11 CVEs

Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks

The Hacker NewsAug 31, 15:10 UTC · Aug 31, 2024Vulnerability CVE-2024-7029 CVE-2014-8361 CVE-2017-17215

Unpatched CCTV Cameras Exploited to Spread Mirai Variant

Infosecurity MagazineAug 29, 15:00 UTC · Aug 29, 2024Vulnerability in the wildCVE-2024-7029 CVE-2014-8361 CVE-2017-17215

Corona Mirai botnet spreads via AVTECH CCTV zero

Security AffairsAug 29, 12:50 UTC · Aug 29, 2024Malware CVE-2024-7029 CVE-2017-17215 CVE-2014-8361

Unpatchable 0-day in surveillance cam is being exploited to install Mirai

Ars Technica · SecurityAug 28, 21:25 UTC · Aug 28, 2024Exploit / PoC in the wildCVE-2024-7029 CVE-2017-17215 CVE-2014-8361

Cyber Attackers Turn to Cloud Services to Deploy Malware

Infosecurity MagazineJun 26, 13:30 UTC · Jun 26, 2024Malware CVE-2023-1389 CVE-2024-21887 CVE-2016-20016+2 CVEs

Threat Brief: VMware Vulnerabilities Exploited in the Wild (CVE-2022

Palo Alto Unit 42Jun 5, 20:43 UTC · Jun 5, 2024Exploit / PoC in the wildCVE-2022-22954 CVE-2022-22960 CVE-2022-22972+8 CVEs

HinataBot, a new Go-Based DDoS botnet in the threat landscape

Security AffairsMar 17, 15:41 UTC · Mar 17, 2023Malware CVE-2014-8361 CVE-2017-17215

Cyberium malware-hosting domain employed in multiple Mirai variants campaigns

Security AffairsJun 16, 06:17 UTC · Jun 16, 2021Malware in the wildCVE-2020-10987 CVE-2017-17215 CVE-2014-83611

'Satori' IoT DDoS Botnet Operator Sentenced to 13 Months in Prison

The Hacker NewsJun 26, 14:05 UTC · Jun 26, 2020Malware CVE-2017-17215

Attackers increasingly exploiting vulnerabilities to enlarge their IoT botnets

Help Net SecurityDec 24, 08:11 UTC · Dec 24, 2018Vulnerability in the wildCVE-2014-8361 CVE-2015-2051 CVE-2017-17215+1 CVEs