CVE-2017-15328

Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability. An attacker can access a specific URL of the affect product. Due to improper verification of the privilege, successful exploitation may cause information leak.

Score

CVSS 3.0 7.5 High

Status

Modified - psirt@huawei.com

Published

2017-12-22

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Hg8245h Firmware (Huawei)
• Hg8245h (Huawei Technologies Co. Ltd.)

References

• http://support.huawei.com/carrier/docview%21docview?nid=DOC1000441394&path=PBI1-7275726/PBI1-7275742/PBI1-7912539/PBI1-…
• https://hacked0x90.wordpress.com/2017/11/30/hg8245h-authentication-bypass/