Lucene search

[email protected]CVE-2018-7900

HistoryJan 02, 2019 - 4:29 p.m.

CVE-2018-7900

2019-01-0216:29:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2018-7900

information leak

huawei hg

vulnerability

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

27.5%

JSON

There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG device by exploiting this vulnerability.

CPENameOperatorVersion
huawei:hg8010h_firmwarehuawei hg8010h firmwareeq-
huawei:hg8040h_firmwarehuawei hg8040h firmwareeq-
huawei:hg8110h_firmwarehuawei hg8110h firmwareeq-
huawei:hg8240h_firmwarehuawei hg8240h firmwareeq-
huawei:hg8242h_firmwarehuawei hg8242h firmwareeq-
huawei:hg8045q_firmwarehuawei hg8045q firmwareeq-

CPE	Name	Operator	Version
huawei:hg8010h_firmware	huawei hg8010h firmware	eq	-
huawei:hg8040h_firmware	huawei hg8040h firmware	eq	-
huawei:hg8110h_firmware	huawei hg8110h firmware	eq	-
huawei:hg8240h_firmware	huawei hg8240h firmware	eq	-
huawei:hg8242h_firmware	huawei hg8242h firmware	eq	-
huawei:hg8045q_firmware	huawei hg8045q firmware	eq	-

References

www.huawei.com/en/psirt/security-notices/huawei-sn-20181219-01-hg-en

blog.newskysecurity.com/information-disclosure-vulnerability-cve-2018-7900-makes-it-easy-for-attackers-to-find-huawei-3e7039b6f44f

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

27.5%

JSON

Related for CVE-2018-7900

prion1 threatpost1