CVE-2017-2738

VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentication for accessing web pages. An unauthenticated attacker could bypass the authentication by sending a crafted HTTP request. 5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system.

• CWE-287

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-enVendor Advisory
• http://www.securityfocus.com/bid/97231Third Party Advisory, VDB Entry
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-enVendor Advisory
• http://www.securityfocus.com/bid/97231Third Party Advisory, VDB Entry

Published

Nov 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2732Huawei Hilink APP Versions earlier before 5.0.25.306 has an …
• CVE-2017-2733Honor 6X smartphones with software versions earlier than BLN…
• CVE-2017-2734P9 Plus smartphones with software versions earlier before VI…
• CVE-2017-2735TIT-AL00 smartphones with software versions earlier before T…
• CVE-2017-2736VCM5010 with software versions earlier before V100R002C50SPC…
• CVE-2017-2737VCM5010 with software versions earlier before V100R002C50SPC…
• CVE-2017-2739The upgrade package of Huawei Vmall APP Earlier than HwVmall…
• CVE-2017-2740A potential security vulnerability has been identified with …
• CVE-2017-2741A potential security vulnerability has been identified with …
• CVE-2017-2742A potential security vulnerability has been identified with …
• CVE-2017-2743HP has identified a potential security vulnerability with HP…
• CVE-2017-2744The vulnerability allows attacker to extract binaries into p…