CVE-2017-8155

Severity: high (CVSS 8.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-22 · updated 2026-06-17
Weakness: CWE-306

Description

The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the network between the indoor and outdoor units of the CPE, an attacker can deliver commands to the specific port of the outdoor unit and execute them without authentication. Successful exploit could allow the attacker to take control over the outdoor unit.

Affected products

Huawei Technologies Co., Ltd. B2338-168: v100r001c00

References

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en
http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en

Get alerted when CVE-2017-8155 or the next vulnerability affects your stack