CVE-2018-7902

2018-05-2414:00:00

huawei

www.cve.org

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

JSON

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system.

CNA Affected

[
  {
    "product": "1288H V5; 2288H V5",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "V100R005C00"
      }
    ]
  }
]