CVE-2017-8155

Description

The outdoor unit of Customer Premise Equipment (CPE) product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the network between the indoor and outdoor units of the CPE, an attacker can deliver commands to the specific port of the outdoor unit and execute them without authentication. Successful exploit could allow the attacker to take control over the outdoor unit.

Risk Information

Base Score

8.4

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.023

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-8155 ,CVE-2017-8156 are affected in b2338-168_firmware v100r001c00	NCM
Missing Authentication for Critical Function Vulnerability (CVE-2017-8155)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234