← Back

CVE-2017-8156

nvd nist
Published: Nov 22, 2017Modified: May 13, 2026

JSON object

Loading...
6.8
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can access the serial port on the circuit board of the outdoor unit and log in to the CPE without authentication. Successful exploit could allow the attacker to take control over the outdoor unit.

Affected (1)

Huawei
1 product
B2338 168 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
B2338 168 Firmware
Version v100r001c00
Running on/withPlatform Versions
Huawei
B2338 168
All versions

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.