PT-2018-8448 · Huawei · Huawei Iptv Stb

Published 2018-03-20 · Updated 2019-10-03 · CVE-2017-8176

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei IPTV STB versions prior to V100R003C01LMYTa6SPC001

Description The issue allows an attacker to bypass authentication, accessing the serial interface and modifying the configuration, which could lead to unauthorized access and viewing of channels without payment.

Recommendations For versions prior to V100R003C01LMYTa6SPC001, update to V100R003C01LMYTa6SPC001 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-8176

Affected Products

Huawei Iptv Stb

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-8176 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8176 · Vendor Advisory
• http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B · Note
• http://security.my/post/165370836947/cve-2017-8176 · Note