CVE-2017-8136

CVE-2017-8136 describes an arbitrary file download vulnerability in Huawei HedEx Lite versions earlier than V200R006C00. An attacker could exploit this by tricking a user into interacting with a malicious file, leading to the unauthorized download of arbitrary files and potential information disclosure. With a CVSS score of 5.5 (Medium), this vulnerability requires local access and user interaction, but successful exploitation could result in high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.