Description
HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Huawei Technologies | HedEx Lite | Earlier than V200R006C00 versions | — |