CVE-2017-8156

Severity: medium (CVSS 6.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-22 · updated 2026-06-17
Weakness: CWE-306

Description

The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can access the serial port on the circuit board of the outdoor unit and log in to the CPE without authentication. Successful exploit could allow the attacker to take control over the outdoor unit.

Affected products

Huawei Technologies Co., Ltd. B2338-168: v100r001c00

References

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en
http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170920-01-cpe-en

Get alerted when CVE-2017-8156 or the next vulnerability affects your stack