PT-2017-18146 · Huawei · Hedex

-Rwx------ · Publicado 2017-11-22 · Atualizado 2017-12-07 · CVE-2017-8137

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HedEx versions earlier than V200R006C00

Description The issue is related to a dynamic link library (DLL) hijacking vulnerability. This occurs because the software calls a DLL file by accessing a relative path, allowing an attacker to potentially tamper with the DLL file and lead to DLL hijacking.

Recommendations For versions earlier than V200R006C00, update to V200R006C00 or later to resolve the issue. As a temporary workaround, consider restricting access to the relative path used to call the DLL file to minimize the risk of exploitation.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-8137

Produtos afetados

Hedex

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-8137 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-8137 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en · Aviso do Fabricante