Back to Database
Status published
High
CVE-2017-8138
HedEx Earlier than V200R006C00 versions has a cross-site request forgery...
Vulnerability Description
HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-8138
Credits & Attribution
No credits recorded in the NVD database.
More from Huawei Technologies Co., Ltd.
View All →CVE-2018-7994
Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10;...
High
7.5
CVE-2018-7993
HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311...
High
7.8
CVE-2018-7992
Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro...
Medium
5.5
CVE-2018-7991
Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have...
Medium
4.6
CVE-2018-7990
Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00)...
Medium
4.6
Affected Vendor
Huawei Technologies Co., Ltd.
View all reports →Affected Software
HedEx Lite
Vulnerable Versions:
Earlier than V200R006C00 versions
Timeline
Official Publish:
November 22nd, 2017
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.