Green Packet Unknown

Notified:  May 31, 2017 Updated: May 31, 2017

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

    Huawei Technologies Affected

    Notified:  May 31, 2017 Updated: June 08, 2017

    Statement Date:   June 01, 2017

    Status

    Affected

    Vendor Statement

    Based on the investigation, we confirmed that the products mentioned(Huawei BM2022,Huawei HES-309M ,Huawei HES-319M ,Huawei HES-319M2W ,Huawei HES-339M) in the report have reached End of Service (EOS) on June 30, 2015,.Huawei has established a lifecycle management system and clarifies the product lifecycle strategy and product termination strategy, implementing lifecycle management in accordance with industry practices.

    Vendor Information

    We are not aware of further vendor information regarding this vulnerability.

    Vendor References

    MediaTek Not Affected

    Notified:  April 19, 2017 Updated: June 07, 2017

    Statement Date:   May 15, 2017

    Status

    Not Affected

    Vendor Statement

    No statement is currently available from the vendor regarding this vulnerability.

    Vendor Information

    MediaTek has responded that the vulnerable cgi script is not provided in SDK releases, but the source code for the httpd plugin is provided to customers for customization. MediaTek therefore believes the vulnerability was introduced by customer(s).

    MitraStar Unknown

    Notified:  April 24, 2017 Updated: April 24, 2017

    Status

    Unknown

    Vendor Statement

    No statement is currently available from the vendor regarding this vulnerability.

    Vendor References

      ZTE Corporation Affected

      Notified:  May 31, 2017 Updated: July 24, 2017

      Statement Date:   July 21, 2017

      Status

      Affected

      Vendor Statement

      No statement is currently available from the vendor regarding this vulnerability.

      Vendor Information

      The OX330P is end-of-service (EOS) and is not expected to receive updates. Affected customers should consider the security risks and take appropriate action.

      ZyXEL Affected

      Notified:  April 24, 2017 Updated: June 13, 2017

      Statement Date:   June 09, 2017

      Status

      Affected

      Vendor Statement

      No statement is currently available from the vendor regarding this vulnerability.

      Vendor Information

      ZyXEL has released a security advisory about this issue. Affected products are expected to have updates in the June or July 2017 timeframe.

      Vendor References