Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Huawei IPTV set-top box allows unauthenticated serial access

CVE-2017-8176 · published 8 years ago
Summary

Older Huawei IPTV set-top boxes can be tricked into skipping login checks, giving anyone direct access to the device's serial control port. This lets an attacker change settings and view TV channels without paying. Update the firmware to the latest version or apply the vendor's recommended patch to close the bypass.

What to do
  • Update huawei iptv_stb_firmware to version v100r003c01lmyta6spc001 or later.
Affected software
VendorProductAffected versions
huawei iptv_stb_firmware < v100r003c01lmyta6spc001
cpe:2.3:o:huawei:iptv_stb_firmware:*:*:*:*:*:*:*:*
Original advisory text
Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface a...
Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published20 Mar 2018
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-8176 · NVD
Track software like this
Free during beta