Huawei HedEx Lite (DM) Path Traversal Vulnerability

Huawei HedEx Lite is a product document manager from Huawei China. The product supports the functions of downloading, managing and reading product documents. A path traversal vulnerability exists in Huawei HedEx Lite DM. An attacker can use the vulnerability to request a local file or resource by...

Huawei HedEx Lite Cross-Site Request Forgery Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. A cross-site request forgery vulnerability exists in versions prior to Huawei HedEx Lite V200R006C00. An attacker can exploit this vulnerability with malicious scripts to modify the configuration and interfere with legitimate...

Huawei HedEx Lite Arbitrary File Download Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. An arbitrary file download vulnerability exists in Huawei HedEx Lite versions prior to V200R006C00. An attacker can exploit this vulnerability to download arbitrary files locally and disclose information...

Huawei HedEx Lite DLL Hijacking Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. A DLL hijacking vulnerability exists in Huawei HedEx Lite versions prior to V200R006C00, which originates from accessing a relative path to call a DLL file during HedEx operation. A remote attacker could exploit this...

Huawei HedEx Lite Cross-Site Scripting Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. A cross-site scripting vulnerability exists in versions prior to Huawei HedEx Lite V200R006C00. A remote attacker can exploit this vulnerability to embed malicious scripts into the device's configuration file and interfere wit...