high8.8
CVE-2018-7943
There is an authentication bypass vulnerability in some Huawei servers.
Impact
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | 1288h V5 Firmware | Version v100r005c00 |
| Huawei | 2288h V5 Firmware | Version v100r005c00 |
| Huawei | 2488 V5 Firmware | Version v100r005c00 |
| Huawei | Ch121 V3 Firmware | Version v100r001c00 |
| Huawei | Ch121l V3 Firmware | Version v100r001c00 |
| Huawei | Ch121l V5 Firmware | Version v100r001c00 |
| Huawei | Ch121 V5 Firmware | Version v100r001c00 |
| Huawei | Ch140 V3 Firmware | Version v100r001c00 |
| Huawei | Ch140l V3 Firmware | Version v100r001c00 |
| Huawei | Ch220 V3 Firmware | Version v100r001c00 |
| Huawei | Ch222 V3 Firmware | Version v100r001c00 |
| Huawei | Ch242 V3 Firmware | Version v100r001c00 |