Huawei Technologies Co., Ltd. Hedex Lite vulnerabilities

4 vulnerabilities

Known vulnerabilities in Huawei Technologies Co., Ltd. Hedex Lite, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2017-8137huawei technologies co., ltd.hedex lite+1
EPSS score
0.73%
HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.6.1CVE-2017-8139huawei technologies co., ltd.hedex lite+1
EPSS score
0.53%
HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users.5.5CVE-2017-8136huawei technologies co., ltd.hedex lite+1
EPSS score
0.63%
HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target device to cause information leak.8.8CVE-2017-8138huawei technologies co., ltd.hedex lite+1
EPSS score
0.39%
HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.