Approved changes feed: RSS · Atom

cpe:2.3:a:huawei_technologies_co.,_ltd.:hedex_lite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHuawei Technologies Co., Ltd. (33b7ced4-31fe-5cee-b3d6-4f50b86c1c00)
ProductHedex Lite (5c46078f-411e-5a1e-ab99-95ecc384a2a0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8139 vulnerable 2026-06-08 05:10:07.271091 Details available
HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users.
Published: 2017-11-22T19:00:00.000Z
Updated: 2024-09-16T20:52:43.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8138 vulnerable 2026-06-08 05:10:07.270699 Details available
HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.
Published: 2017-11-22T19:00:00.000Z
Updated: 2024-09-16T19:00:29.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8137 vulnerable 2026-06-08 05:10:07.270375 Details available
HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.
Published: 2017-11-22T19:00:00.000Z
Updated: 2024-09-17T01:25:47.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8136 vulnerable 2026-06-08 05:10:07.269073 Details available
HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target device to cause information leak.
Published: 2017-11-22T19:00:00.000Z
Updated: 2024-09-17T01:46:27.313Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.