Unknown
CVE-2018-7943
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
Unknown
(0 users assessed)Unknown
(0 users assessed)Unknown
Unknown
Unknown
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users’ privilege.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
Products
- 1288h v5 firmware v100r005c00,
- 2288h v5 firmware v100r005c00,
- 2488 v5 firmware v100r005c00,
- ch121 v3 firmware v100r001c00,
- ch121 v5 firmware v100r001c00,
- ch121l v3 firmware v100r001c00,
- ch121l v5 firmware v100r001c00,
- ch140 v3 firmware v100r001c00,
- ch140l v3 firmware v100r001c00,
- ch220 v3 firmware v100r001c00,
- ch222 v3 firmware v100r001c00,
- ch242 v3 firmware v100r001c00,
- ch242 v5 firmware v100r001c00,
- rh1288 v3 firmware v100r003c00,
- rh2288 v3 firmware v100r003c00,
- rh2288h v3 firmware v100r003c00,
- xh310 v3 firmware v100r003c00,
- xh321 v3 firmware v100r003c00,
- xh321 v5 firmware v100r005c00,
- xh620 v3 firmware v100r003c00
References
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below: