high7.8
CVE-2017-8137
HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path.
Impact
HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Hedex Lite | before v200r006c00 |