CVE-2018-7959

2018-11-2722:00:00

huawei

www.cve.org

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak.

CNA Affected

[
  {
    "product": "eSpace 7950",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "V200R003C30"
      }
    ]
  }
]