Vulnerability Description
There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Espace 7950 Firmware | v200r003c30 |
| Huawei | Espace 7950 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-Vendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-Vendor Advisory
FAQ
What is CVE-2018-7960?
CVE-2018-7960 is a vulnerability with a CVSS score of 7.4 (HIGH). There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Suc...
How severe is CVE-2018-7960?
CVE-2018-7960 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7960?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Espace 7950 Firmware, Huawei Espace 7950.