high8.8
CVE-2017-8138
HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability.
Impact
HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website containing malicious scripts which may tamper with configurations and interrupt normal services.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Hedex Lite | before v200r006c00 |