CVE-2017-8133

Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a high privileged user could execute, causing the files to be tampered with or deleted.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@huawei.com

Published

2017-11-22

Last modified

2024-09-17

Weaknesses

CWE-77

Affected products

• Neteco (Huawei)
• Imanager Neteco (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-neteco-en