CVE-2017-8185
High
Description
ME906s-158 earlier than ME906S_Installer_13.1805.10.3 versions has a privilege elevation vulnerability. An attacker could exploit this vulnerability to modify the configuration information containing malicious files and trick users into executing the files, resulting in the execution of arbitrary code.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHuawei Me906s-158 Firmware
PublishedNov 22, 2017
First seenNov 22, 2017
How to fix
Update
- huawei me906s-158_firmwareme906s_installer_13.1805.10.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei me906s-158_firmware | v < me906s_installer_13.1805.10.3 | me906s_installer_13.1805.10.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.