CVE-2017-8137
HIGHHedEx Lite < V200R006C00 - DLL Hijacking via Relative Path
Title source: llmDescription
HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.
References (1)
Core 1
Core References
Issue Tracking, Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en
Scores
CVSS v3
7.8
EPSS
0.0006
EPSS Percentile
17.8%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-426
Status
published
Products (2)
huawei/hedex_lite
< v200r006c00
Huawei Technologies Co., Ltd./HedEx Lite
Earlier than V200R006C00 versions
Published
Nov 22, 2017
Tracked Since
Feb 18, 2026