Cross-Site Request Forgery Vulnerability in HedEx by Huawei
CVE-2017-8138

8.8HIGH

Key Information:

Vendor

McAfee
Status
Hedex Lite
Vendor
CVE Published:
22 November 2017

What is CVE-2017-8138?

HedEx versions prior to V200R006C00 contain a vulnerability that allows attackers to exploit cross-site request forgery (CSRF). This weakness can enable malicious actors to trick users into unknowingly executing requests that may alter configurations or disrupt services. Proper mitigation strategies and user awareness are essential to protect against potential attacks targeting this issue.

Affected Version(s)

HedEx Lite Earlier than V200R006C00 versions

References

http://www.huawei.com/en/psirt/security-advisories/2017/h...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.