Internet-Security.com TCP port 37215 details

TCP 37215 is used by Huawei Home Gateway/EchoLife consumer routers (e.g., HG532, HG532e, HG532s) for an HTTP SOAP management service related to UPnP/TR-064.
The service commonly banners as “HuaweiHomeGateway” and is implemented by the UPnP/miniigd daemon listening on 37215.
In 2017, CVE-2017-17215 in this service enabled unauthenticated remote code execution and was heavily exploited by the Satori (a Mirai variant) botnet to infect Huawei routers.
Many ISP-supplied Huawei CPE exposed this port on the WAN, which led to large-scale scanning and abuse of 37215 in the wild.
Beyond Huawei CPE implementations, no other mainstream software or protocols are commonly documented to use TCP 37215.

TCP 37215