6.5

CVE-2018-7900

There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG device by exploiting this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Hg8010h Firmware Version -
   Huawei ≫ Hg8010h Version -
Huawei ≫ Hg8040h Firmware Version -
   Huawei ≫ Hg8040h Version -
Huawei ≫ Hg8110h Firmware Version -
   Huawei ≫ Hg8110h Version -
Huawei ≫ Hg8240h Firmware Version -
   Huawei ≫ Hg8240h Version -
Huawei ≫ Hg8242h Firmware Version -
   Huawei ≫ Hg8242h Version -
Huawei ≫ Hg8045q Firmware Version -
   Huawei ≫ Hg8045q Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.79% 0.515
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.huawei.com/en/psirt/security-notices/huawei-sn-20181219-01-hg-en
Vendor Advisory
https://blog.newskysecurity.com/information-disclosure-vulnerability-cve-2018-7900-makes-it-easy-for-attackers-to-find-huawei-3e7039b6f44f
Third Party Advisory