CVE-2017-8185: Huawei ME906S-158 Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

ME906s-158 earlier than ME906S_Installer_13.1805.10.3 versions has a privilege elevation vulnerability. An attacker could exploit this vulnerability to modify the configuration information containing malicious files and trick users into executing the files, resulting in the execution of arbitrary code.

Affected products

• Huawei ME906S-158 Firmware: before me906s_installer_13.1805.10.3 (fixed in me906s_installer_13.1805.10.3)

Published 2017-11-22. Last modified 2026-06-17.