CVE-2017-8176

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-20 · updated 2026-06-17

Description

Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free.

Affected products

Huawei Technologies Co., Ltd. IPTV STB: before v100r003c01lmyta6spc001 — fixed in v100r003c01lmyta6spc001

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. IPTV STB v100r003c01lmyta6spc001. Check the vendor advisory for mitigations.

References

http://security.my/post/165370836947/cve-2017-8176
http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B
http://security.my/post/165370836947/cve-2017-8176
http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B

Get alerted when CVE-2017-8176 or the next vulnerability affects your stack