CVE-2018-7900

EPSS 0.19%
Published 02.01.2019 16:29:00
Last modified 21.11.2024 04:12:56
Source psirt@huawei.com
Teams watchlist Login
Open Login

There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG device by exploiting this vulnerability.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Huawei ≫ Hg8010h Firmware Version-

Huawei ≫ Hg8010h Version-

Huawei ≫ Hg8040h Firmware Version-

Huawei ≫ Hg8040h Version-

Huawei ≫ Hg8110h Firmware Version-

Huawei ≫ Hg8110h Version-

Huawei ≫ Hg8240h Firmware Version-

Huawei ≫ Hg8240h Version-

Huawei ≫ Hg8242h Firmware Version-

Huawei ≫ Hg8242h Version-

Huawei ≫ Hg8045q Firmware Version-

Huawei ≫ Hg8045q Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.19%	0.407

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.huawei.com/en/psirt/security-notices/huawei-sn-20181219-01-hg-en

Vendor Advisory

https://blog.newskysecurity.com/information-disclosure-vulnerability-cve-2018-7900-makes-it-easy-for-attackers-to-find-huawei-3e7039b6f44f

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-7900

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-7900

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-7900

EUVD