CVE-2017-15328 Auth bypass in HG8245H
An attacker can bypass authentication to access specific URLs, leading to information disclosure on Huawei HG8245H devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-15328?
CVE-2017-15328 is a high-severity authentication bypass vulnerability in Huawei Technologies Co., Ltd. HG8245H, published on 22 Dec 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability. An attacker can access a specific URL of the affect product. Due to improper verification of the privilege, successful exploitation may cause information leak.
Weakness: CWE-200
Which versions are affected by CVE-2017-15328?
It affects 1 product.
Products include Huawei Hg8245h Firmware.
How do I fix CVE-2017-15328?
No fix has been published for CVE-2017-15328 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-15328 being exploited?
There is no known exploitation of CVE-2017-15328 in the wild and no public exploit code.
Sources
Also known as GHSA-jw2q-4jj9-vfv9.