Vulnerability Description
The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the network between the indoor and outdoor units of the CPE, an attacker can deliver commands to the specific port of the outdoor unit and execute them without authentication. Successful exploit could allow the attacker to take control over the outdoor unit.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | B2338-168 Firmware | v100r001c00 |
| Huawei | B2338-168 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpVendor Advisory
FAQ
What is CVE-2017-8155?
CVE-2017-8155 is a vulnerability with a CVSS score of 8.4 (HIGH). The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the network between the indoor and outdoor u...
How severe is CVE-2017-8155?
CVE-2017-8155 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-8155?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei B2338-168 Firmware, Huawei B2338-168.