Unscored CVE-2017-8139 EUVD-2017-17101GHSA-8xxv-qcj5-jq83

HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability t…

Published Nov 22, 2017 · Updated Sep 16, 2024 · Assigned by huawei

Vendor: Huawei Product: HedEx Lite Category: Network devices

Description

HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users.

Affected products

Vendor	Product	Affected	Fixed
Huawei Technologies	HedEx Lite	Earlier than V200R006C00 versions	—

References

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en