CVE-2017-8137

Published: Nov 22, 2017

Modified: Sep 17, 2024

PUBLISHED

Description

HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.

Vendor	Product	Versions
Huawei Technologies Co., Ltd.	HedEx Lite	affected `Earlier than V200R006C00 versions`

References

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-8137

Description

Affected Products

References