CVE-2017-8176

Published: Mar 20, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free.

Affected (1)

Products: Huawei: Iptv Stb Firmware

1 product

Iptv Stb Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Iptv Stb Firmware	Before v100r003c01lmyta6spc001

Running on/with	Platform Versions
Huawei Iptv Stb	All versions

References (4)

http://security.my/post/165370836947/cve-2017-8176

Source: psirt@huawei.com

Third Party Advisory

http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B

Source: psirt@huawei.com

http://security.my/post/165370836947/cve-2017-8176

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.