No Authentication Vulnerability in Customer Premise Equipment by Huawei

CVE-2017-8155

Summary

A vulnerability exists in Huawei's Customer Premise Equipment (CPE) model B2338-168 V100R001C00 that allows an attacker to send unauthorized commands to the outdoor unit. This happens due to a lack of authentication on a certain network port. If an attacker gains access to the network connecting the indoor and outdoor units, they can exploit this weakness to control the outdoor unit, potentially compromising the integrity of the entire system. Proper security measures and timely updates are recommended to mitigate this risk.

References