CVE-2017-8176

{"id": "CVE-2017-8176", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-03-20T15:29:00.533", "references": [{"url": "http://security.my/post/165370836947/cve-2017-8176", "tags": ["Third Party Advisory"], "source": "psirt@huawei.com"}, {"url": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B", "source": "psirt@huawei.com"}, {"url": "http://security.my/post/165370836947/cve-2017-8176", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free."}, {"lang": "es", "value": "Huawei IPTV STB, con versiones anteriores a IPTV STB V100R003C01LMYTa6SPC001, tiene una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n. Un atacante podr\u00eda explotar esta vulnerabilidad para acceder a la interfaz serie y modificar la configuraci\u00f3n. Si se explota con \u00e9xito, podr\u00eda desembocar en una omisi\u00f3n de autenticaci\u00f3n y en la visi\u00f3n de canales gratuitamente."}], "lastModified": "2024-11-21T03:33:28.493", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:iptv_stb_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5235F6C-40BC-40FD-947C-16B0ECA74D39", "versionEndExcluding": "v100r003c01lmyta6spc001"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:iptv_stb:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AC278E31-C7CA-40C9-A6C9-64112505993F"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@huawei.com"}