Huawei Technologies Co., Ltd. Hedex Lite
4 CVEs affecting Huawei Technologies Co., Ltd. Hedex Lite. Latest disclosed: 2017-11-22. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8138 | High | 8.8 | 2017-11-22 | HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containi… |
CVE-2017-8137 | High | 7.8 | 2017-11-22 | HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An a… |
CVE-2017-8139 | Medium | 6.1 | 2017-11-22 | HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious sc… |
CVE-2017-8136 | Medium | 5.5 | 2017-11-22 | HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target devi… |