high7.2
CVE-2017-2736
VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability.
Impact
VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Vcm5010 Firmware | before v100r002c50spc100 |