CVE-2017-8137

High

Published: 22/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HedEx versions earlier than V200R006C00 has a DLL hijacking vulnerability due to calling the DLL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system and potential introduction of malicious software.

Recommendation

It is recommended to update HedEx to version V200R006C00 or later to mitigate this vulnerability.

Other vulnerabilities in HedEx

CVE-2017-8138High
HedEx versions earlier than V200R006C00 have a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.

Original NVD description (English source)

HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS