Vulnerabilities > Huawei > Hedex Lite > High

DATE CVE VULNERABILITY TITLE RISK
2017-11-22 CVE-2017-8138 Cross-Site Request Forgery (CSRF) vulnerability in Huawei Hedex Lite
HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability.
network
low complexity
huawei CWE-352
8.8
8.8
2017-11-22 CVE-2017-8137 Untrusted Search Path vulnerability in Huawei Hedex Lite
HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path.
local
low complexity
huawei CWE-426
7.8
7.8