Vulnerability Description
Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traversal vulnerability. Due to the lack of validation while these home gateway products install APK plugins, an attacker tricks a user into installing a malicious APK plugin, and plugin can overwrite arbitrary file of devices. Successful exploit may result in arbitrary code execution or privilege escalation.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Hirouter-Cd20 Firmware | < hirouter-cd20-10_1.9.6 |
| Huawei | Hirouter-Cd20 | - |
| Huawei | Ws5200 Firmware | < ws5200-10_1.9.6 |
| Huawei | Ws5200 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180502-01-gatewayVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180502-01-gatewayVendor Advisory
FAQ
What is CVE-2018-7933?
CVE-2018-7933 is a vulnerability with a CVSS score of 7.8 (HIGH). Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traversal vulnerability. Due to the lack of va...
How severe is CVE-2018-7933?
CVE-2018-7933 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7933?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Hirouter-Cd20 Firmware, Huawei Hirouter-Cd20, Huawei Ws5200 Firmware, Huawei Ws5200.