Search
Find a vulnerability
Search criteria
2 vulnerabilities found for iptv_stb_firmware by huawei
CVE-2017-8176 (GCVE-0-2017-8176)
Vulnerability from nvd – Published: 2018-03-20 15:00 – Updated: 2024-08-05 16:27
VLAI
EPSS
VEX
Summary
Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free.
Severity
No CVSS data available.
CWE
- Authentication Bypass
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://support.huawei.com/carrier/navi?coltype=so… | x_refsource_CONFIRM |
| http://security.my/post/165370836947/cve-2017-8176 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Huawei Technologies Co., Ltd. | IPTV STB |
Affected:
Earlier than IPTV STB V100R003C01LMYTa6SPC001 versions
|
Date Public
2017-09-16 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T16:27:22.851Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software\u0026detailId=PBI1-22570793\u0026path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715\u0026lang=en%3B"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://security.my/post/165370836947/cve-2017-8176"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "IPTV STB",
"vendor": "Huawei Technologies Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "Earlier than IPTV STB V100R003C01LMYTa6SPC001 versions"
}
]
}
],
"datePublic": "2017-09-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Authentication Bypass",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-03-20T14:57:01.000Z",
"orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"shortName": "huawei"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software\u0026detailId=PBI1-22570793\u0026path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715\u0026lang=en%3B"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://security.my/post/165370836947/cve-2017-8176"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@huawei.com",
"ID": "CVE-2017-8176",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "IPTV STB",
"version": {
"version_data": [
{
"version_value": "Earlier than IPTV STB V100R003C01LMYTa6SPC001 versions"
}
]
}
}
]
},
"vendor_name": "Huawei Technologies Co., Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Authentication Bypass"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software\u0026detailId=PBI1-22570793\u0026path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715\u0026lang=en;",
"refsource": "CONFIRM",
"url": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software\u0026detailId=PBI1-22570793\u0026path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715\u0026lang=en;"
},
{
"name": "http://security.my/post/165370836947/cve-2017-8176",
"refsource": "MISC",
"url": "http://security.my/post/165370836947/cve-2017-8176"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"assignerShortName": "huawei",
"cveId": "CVE-2017-8176",
"datePublished": "2018-03-20T15:00:00.000Z",
"dateReserved": "2017-04-25T00:00:00.000Z",
"dateUpdated": "2024-08-05T16:27:22.851Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-8176 (GCVE-0-2017-8176)
Vulnerability from cvelistv5 – Published: 2018-03-20 15:00 – Updated: 2024-08-05 16:27
VLAI
EPSS
VEX
Summary
Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free.
Severity
No CVSS data available.
CWE
- Authentication Bypass
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://support.huawei.com/carrier/navi?coltype=so… | x_refsource_CONFIRM |
| http://security.my/post/165370836947/cve-2017-8176 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Huawei Technologies Co., Ltd. | IPTV STB |
Affected:
Earlier than IPTV STB V100R003C01LMYTa6SPC001 versions
|
Date Public
2017-09-16 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T16:27:22.851Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software\u0026detailId=PBI1-22570793\u0026path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715\u0026lang=en%3B"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://security.my/post/165370836947/cve-2017-8176"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "IPTV STB",
"vendor": "Huawei Technologies Co., Ltd.",
"versions": [
{
"status": "affected",
"version": "Earlier than IPTV STB V100R003C01LMYTa6SPC001 versions"
}
]
}
],
"datePublic": "2017-09-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Authentication Bypass",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-03-20T14:57:01.000Z",
"orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"shortName": "huawei"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software\u0026detailId=PBI1-22570793\u0026path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715\u0026lang=en%3B"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://security.my/post/165370836947/cve-2017-8176"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@huawei.com",
"ID": "CVE-2017-8176",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "IPTV STB",
"version": {
"version_data": [
{
"version_value": "Earlier than IPTV STB V100R003C01LMYTa6SPC001 versions"
}
]
}
}
]
},
"vendor_name": "Huawei Technologies Co., Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Authentication Bypass"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software\u0026detailId=PBI1-22570793\u0026path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715\u0026lang=en;",
"refsource": "CONFIRM",
"url": "http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software\u0026detailId=PBI1-22570793\u0026path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715\u0026lang=en;"
},
{
"name": "http://security.my/post/165370836947/cve-2017-8176",
"refsource": "MISC",
"url": "http://security.my/post/165370836947/cve-2017-8176"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"assignerShortName": "huawei",
"cveId": "CVE-2017-8176",
"datePublished": "2018-03-20T15:00:00.000Z",
"dateReserved": "2017-04-25T00:00:00.000Z",
"dateUpdated": "2024-08-05T16:27:22.851Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}