CVE-2017-17215

CVSS 3.0: 8.8 high
EPSS: 78%p100
Published: Mar 20, 2018 · Mar 20, 2018
Modified: Jun 17, 2026

Analyze CVE-2017-17215 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code.

Vendors: huawei

Products: hg532 firmware

Weakness: CWE-20

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (78.3%)

In the news

20 stories

New Mirai botnet variant Murdoc Botnet targets AVTECH IP cameras and Huawei HG532 routers

Security AffairsJan 21, 16:41 UTC · Jan 21, 2025MalwareCVE-2024-7029 CVE-2017-17215 CVE-2024-12856+32 · 1 read

Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks

The Hacker NewsJan 8, 10:30 UTC · Jan 8, 2025VulnerabilityExploitedCVE-2024-12856 CVE-2013-3307 CVE-2013-7471+113 · 1 read

Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks

The Hacker NewsAug 31, 15:10 UTC · Aug 31, 2024VulnerabilityCVE-2024-7029 CVE-2014-8361 CVE-2017-172152

Unpatched CCTV Cameras Exploited to Spread Mirai Variant

Infosecurity MagazineAug 29, 15:00 UTC · Aug 29, 2024VulnerabilityExploitedCVE-2024-7029 CVE-2014-8361 CVE-2017-172152 · 2 reads

Corona Mirai botnet spreads via AVTECH CCTV zero

Security AffairsAug 29, 12:50 UTC · Aug 29, 2024MalwareCVE-2024-7029 CVE-2017-17215 CVE-2014-83613 · 1 read

Unpatchable 0-day in surveillance cam is being exploited to install Mirai

Ars Technica · SecurityAug 28, 21:25 UTC · Aug 28, 2024Exploit / PoCExploitedCVE-2024-7029 CVE-2017-17215 CVE-2014-83613

Cyber Attackers Turn to Cloud Services to Deploy Malware

Infosecurity MagazineJun 26, 13:30 UTC · Jun 26, 2024MalwareCVE-2023-1389 CVE-2024-21887 CVE-2016-20016+21

Threat Brief: VMware Vulnerabilities Exploited in the Wild (CVE-2022

Palo Alto Unit 42Jun 5, 20:43 UTC · Jun 5, 2024Exploit / PoCExploitedCVE-2022-22954 CVE-2022-22960 CVE-2022-22972+82 · 2 reads

HinataBot, a new Go-Based DDoS botnet in the threat landscape

Security AffairsMar 17, 15:41 UTC · Mar 17, 2023MalwareCVE-2014-8361 CVE-2017-172151

Cyberium malware-hosting domain employed in multiple Mirai variants campaigns

Security AffairsJun 16, 06:17 UTC · Jun 16, 2021MalwareExploitedCVE-2020-10987 CVE-2017-17215 CVE-2014-83612 · 1 read

'Satori' IoT DDoS Botnet Operator Sentenced to 13 Months in Prison

The Hacker NewsJun 26, 14:05 UTC · Jun 26, 2020MalwareCVE-2017-172152

Attackers increasingly exploiting vulnerabilities to enlarge their IoT botnets

Help Net SecurityDec 24, 08:11 UTC · Dec 24, 2018VulnerabilityExploitedCVE-2014-8361 CVE-2015-2051 CVE-2017-17215+1