CVE-2017-8137

CWE-4263 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 82.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Hedex Lite Huawei Technologies Co., Ltd. Hedex Lite

Timeline

PublishedNov 22

Latest updateMay 17

Description

HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/hedex_lite< v200r006c00

▶CVEListV5huawei_technologies_co.,_ltd./hedex_liteEarlier than V200R006C00 versions

🔴Vulnerability Details

GHSA

GHSA-m7mx-932r-5pm4: HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative p↗2022-05-17

▶

CVEList

CVE-2017-8137: HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative p↗2017-11-22

▶