Vulnerability Description
There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Espace 7950 Firmware | v200r003c30 |
| Huawei | Espace 7950 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-espace-Vendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-espace-Vendor Advisory
FAQ
What is CVE-2018-7958?
CVE-2018-7958 is a vulnerability with a CVSS score of 7.4 (HIGH). There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client w...
How severe is CVE-2018-7958?
CVE-2018-7958 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7958?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Espace 7950 Firmware, Huawei Espace 7950.