All packages
VCM5010 vulnerabilities
3 known CVE vulnerabilities in VCM5010, translated and rated.
- CVE-2017-2737High
VCM5010 with software versions earlier than V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the uploaded files, allowing an authenticated attacker to upload arbitrary files to the system.
- CVE-2017-2736High
VCM5010 with software versions earlier than V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user input.
- CVE-2017-2738Critical
VCM5010 with software versions earlier than V100R002C50SPC100 has an authentication bypass vulnerability and an arbitrary file upload vulnerability. An unauthenticated attacker can bypass the login process, while an authenticated attacker can upload unvalidated files to the system.