CVE-2017-15327
Last modified
CVE-2017-15327 is a vulnerability of currently unknown severity. S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S9700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R009C00, V200R010C00 have an improper authorization vulnerability on Huawei switch products. The system incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by authenticated user. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S9700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R009C00, V200R010C00 have an improper authorization vulnerability on Huawei switch products. The system incorrectly performs an authorization check when a normal user attempts to access certain information which is supposed to be accessed only by authenticated user. Successful exploit could cause information disclosure.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | S12700 Firmware | v200r005c00 |
| Huawei | S12700 Firmware | v200r006c00 |
| Huawei | S12700 Firmware | v200r006c01 |
| Huawei | S12700 Firmware | v200r007c00 |
| Huawei | S12700 Firmware | v200r007c01 |
| Huawei | S12700 Firmware | v200r007c20 |
| Huawei | S12700 Firmware | v200r008c00 |
| Huawei | S12700 Firmware | v200r008c06 |
| Huawei | S12700 Firmware | v200r009c00 |
| Huawei | S12700 Firmware | v200r010c00 |
| Huawei | S7700 Firmware | v200r001c00 |
| Huawei | S7700 Firmware | v200r001c01 |
| Huawei | S7700 Firmware | v200r002c00 |
| Huawei | S7700 Firmware | v200r003c00 |
| Huawei | S7700 Firmware | v200r005c00 |
| Huawei | S7700 Firmware | v200r006c00 |
| Huawei | S7700 Firmware | v200r006c01 |
| Huawei | S7700 Firmware | v200r007c00 |
| Huawei | S7700 Firmware | v200r007c01 |
| Huawei | S7700 Firmware | v200r008c00 |
| Huawei | S7700 Firmware | v200r008c06 |
| Huawei | S7700 Firmware | v200r009c00 |
| Huawei | S7700 Firmware | v200r010c00 |
| Huawei | S9700 Firmware | v200r001c00 |
| Huawei | S9700 Firmware | v200r001c01 |
| Huawei | S9700 Firmware | v200r002c00 |
| Huawei | S9700 Firmware | v200r003c00 |
| Huawei | S9700 Firmware | v200r005c00 |
| Huawei | S9700 Firmware | v200r006c00 |
| Huawei | S9700 Firmware | v200r006c01 |
| Huawei | S9700 Firmware | v200r007c00 |
| Huawei | S9700 Firmware | v200r007c01 |
| Huawei | S9700 Firmware | v200r008c00 |
| Huawei | S9700 Firmware | v200r009c00 |
| Huawei | S9700 Firmware | v200r010c00 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-15327?
How severe is CVE-2017-15327?
How do I fix CVE-2017-15327?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-15321Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has a…
- CVE-2017-15322Some Huawei smartphones with software of BGO-L03C158B003CUST…
- CVE-2017-15323Huawei DP300 V500R002C00, NIP6600 V500R001C00, V500R001C20, …
- CVE-2017-15324Huawei S5700 and S6700 with software of V200R005C00 have a D…
- CVE-2017-15325The Bdat driver of Prague smart phones with software version…
- CVE-2017-15326DBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encrypt…
- CVE-2017-15328Huawei HG8245H version earlier than V300R018C00SPC110 has an…
- CVE-2017-15329Huawei UMA V200R001C00 has a SQL injection vulnerability in …
- CVE-2017-1533IBM Security Access Manager Appliance 9.0.3 is vulnerable to…
- CVE-2017-15330The Flp Driver in some Huawei smartphones of the software Vi…
- CVE-2017-15331Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R0…
- CVE-2017-15332Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R0…
Are you affected by CVE-2017-15327?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
