NetSight
high8.8

CVE-2018-7943

There is an authentication bypass vulnerability in some Huawei servers.

Impact

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.

Affected products

VendorProductAffected versions
Huawei1288h V5 Firmware
Version v100r005c00
Huawei2288h V5 Firmware
Version v100r005c00
Huawei2488 V5 Firmware
Version v100r005c00
HuaweiCh121 V3 Firmware
Version v100r001c00
HuaweiCh121l V3 Firmware
Version v100r001c00
HuaweiCh121l V5 Firmware
Version v100r001c00
HuaweiCh121 V5 Firmware
Version v100r001c00
HuaweiCh140 V3 Firmware
Version v100r001c00
HuaweiCh140l V3 Firmware
Version v100r001c00
HuaweiCh220 V3 Firmware
Version v100r001c00
HuaweiCh222 V3 Firmware
Version v100r001c00
HuaweiCh242 V3 Firmware
Version v100r001c00

Weakness classification

References