CVE-2017-8133: Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploi...

Description

Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a high privileged user could execute, causing the files to be tampered with or deleted.

Metrics

EPSS Probability

1.54%

71.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-77

Affected Software

Vendor	Product	Versions
Huawei	Neteco	v600r008c00
Huawei	Neteco	v600r008c10

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-neteco-enIssue Tracking, Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-neteco-enIssue Tracking, Vendor Advisory

Timeline

Published: Nov 22, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-8133?

Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a high privileged user could execute, causing the files to be tampered with or deleted.

How severe is CVE-2017-8133?

Severity scoring for CVE-2017-8133 is pending analysis. The EPSS model estimates a 1.54% probability of exploitation in the next 30 days.

How do I fix CVE-2017-8133?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2017

View all 2017CVEs →