DLL Hijacking Vulnerability in HedEx Software by Huawei
CVE-2017-8137

7.8HIGH

Key Information:

Vendor

McAfee
Status
Hedex Lite
Vendor
CVE Published:
22 November 2017

What is CVE-2017-8137?

HedEx software versions prior to V200R006C00 are susceptible to a DLL hijacking vulnerability. This issue arises from the use of relative paths when calling dynamic link libraries (DLLs). An attacker can exploit this vulnerability by manipulating the DLL file, potentially leading to unauthorized code execution and system compromise. It is crucial for users of HedEx software to review and update their installations to mitigate this risk.

Affected Version(s)

HedEx Lite Earlier than V200R006C00 versions

References

http://www.huawei.com/en/psirt/security-advisories/2017/h...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.