Vulnerability in Huawei Me906s-158
CVE-2017-8185
ME906s-158 earlier than ME906S_Installer_13.1805.10.3 versions has a privilege elevation vulnerability. An attacker could exploit this vulnerability to modify the configuration information containing malicious files and trick users into executing the files, resulting in the execution of arbitrary code.
EPSS: 0.003 (22.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Huawei Me906s-158
- Huawei Me906s-158_firmware
- Huawei Technologies Co., Ltd. Me906s-158 — versions Earlier than ME906S_Installer_13.1805.10.3 versions
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-8185?
- CVE-2017-8185 is a high-severity vulnerability in Huawei Me906s-158, classified under Exposure of Resource to Wrong Sphere. CVSS score: 7.8/10. Published 2017-11-22.
- How severe is CVE-2017-8185?
- High severity. CVSS v3 base score is 7.8 out of 10.