HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2017-17215: Huawei Router UPnP RCE / Mozi

HoneyLabs honeypots recorded 8 probes matching CVE-2017-17215 from 6 distinct source IP addresses in the last 7 days. Severity is rated CRITICAL.

Request paths that identify it

  • DeviceUpgrade_1

Addresses probing it

Source IPProbesNetworkCountry
65.109.71.2283Hetzner Online GmbHFinland
103.179.240.2061PLAY BROADBAND (PRIVATE) LIMITEDPakistan
119.56.245.2131Saero Network Service LTDSouth Korea
180.164.56.1901China Telecom (Group)China
182.113.6.151CHINA UNICOM China169 BackboneChina
223.123.43.191CMPak LimitedPakistan

Networks it comes from

ASNOrganisationProbesSource IPs
AS24940Hetzner Online GmbH31
AS138423CMPak Limited11
AS151330PLAY BROADBAND (PRIVATE) LIMITED11
AS4812China Telecom (Group)11
AS4837CHINA UNICOM China169 Backbone11
AS9981Saero Network Service LTD11

Where it comes from

CountryProbes
Finland3
China2
Pakistan2
South Korea1

Captured requests

  • /ctrlt/DeviceUpgrade_1

HTTP client fingerprints

  • b11cuq040_00400805_b03a935b
  • b11cuq070_00850813_aee6d12e
  • b11cuq040_00440801_bf8a4cbb

CVE report

CVE report

Open a specific CVE from the CVE tracker.