Improper input validation in Huawei E5771h-937
Priority LOW 29CWE-20Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and the versions before E5771h-937TCPU-V200R001B329D05SP00C1308 have a Denial of Service (DoS) vulnerability. When an attacker accessing device sends special http request to device, the webserver process will try to apply too much memory which can cause the device to become unable to respond. An attacker can launch a DoS attack by exploiting this vulnerability.
Why it matters now
EPSS 0.00365 30th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | E5771h-937 | E5771h-937, The versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and The versions before E5771h-937TCPU-V200R001B329D05SP00C1308 | — | No fix listed | CNA |
- E5771h-937 VendorHuawei Affected E5771h-937, The versions before E5771h-937TCPU-V200R001B328D62SP00C1133 and The versions before E5771h-937TCPU-V200R001B329D05SP00C1308 Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:e5771h-937_firmware:*:*:*:*:*:*:*:* | before v200r001b329d05sp00c1308 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:e5771h-937:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:e5771h-937_firmware:*:*:*:*:*:*:*:* | before v200r001b328d62sp00c1133 | Vulnerable | Huawei |
- cpe:2.3:o:huawei:e5771h-937_firmware:*:*:*:*:*:*:*:* Versions before v200r001b329d05sp00c1308 Vulnerable ·Huawei
- cpe:2.3:h:huawei:e5771h-937:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:e5771h-937_firmware:*:*:*:*:*:*:*:* Versions before v200r001b328d62sp00c1133 Vulnerable ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-17318
- 2026-10-03 Alias added: GHSA-hx3x-474x-cc52
References
Sources
- CVE-2017-17318 · CVE Program
- CVE-2017-17318 · NVD
- FIRST EPSS
- GHSA-hx3x-474x-cc52 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences