PT-2017-18163 · Huawei · B2338-168

Adam Pogorzelski · Publicado 2017-11-22 · Atualizado 2017-12-11 · CVE-2017-8155

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions B2338-168 version V100R001C00

Description The issue affects the outdoor unit of the CPE product, where a certain port has a no authentication vulnerability. An attacker can exploit this by accessing the network between the indoor and outdoor units, delivering commands to the specific port of the outdoor unit, and executing them without authentication. This could allow the attacker to take control over the outdoor unit.

Recommendations For version V100R001C00, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2017-8155

Produtos afetados

B2338-168

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-8155 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-8155 · Aviso do Fabricante