CVE-2017-8138

High

Published: 22/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HedEx versions earlier than V200R006C00 have a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.

Risk Assessment

This vulnerability could lead to unauthorized changes in system configuration and service disruptions, affecting the integrity and availability of the system.

Recommendation

It is recommended to update HedEx to version V200R006C00 or later to mitigate this vulnerability. Additionally, implementing CSRF protection mechanisms is advisable.

Other vulnerabilities in HedEx

CVE-2017-8137High
HedEx versions earlier than V200R006C00 has a DLL hijacking vulnerability due to calling the DLL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.

Original NVD description (English source)

HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS