CVE-2017-8137

HIGH 7.8CVE-2017-8137 · Published 22/11/2017 · updated 17/06/2026

In short

CVE-2017-8137 is a HIGH (CVSS 7.8) vulnerability affecting hedex lite (huawei).
Chance of exploitation in the next 30 days (EPSS): 0.73%, higher than 54.1% of all vulnerabilities.
Fix: update to v200r006c00 or later.

Package	Affected versions	Patched versions
hedex lite huawei	`< v200r006c00`	`v200r006c00`

Description

HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.

References

huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en · Issue Tracking

More vulnerabilities in hedex lite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

hedex lite

huawei

< v200r006c00

v200r006c00

More vulnerabilities in hedex lite

See all →