What’s Vulnerable › Vulnerabilities

CVE-2018-7900

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-01-02 · updated 2026-06-17
• Weakness: CWE-200

Description

There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG device by exploiting this vulnerability.

Affected products

• Huawei Hg8010H Firmware: all versions
• Huawei Hg8040H Firmware: all versions
• EchoLife HG8045Q: all versions
• Huawei Hg8110H Firmware: all versions
• Huawei Hg8240H Firmware: all versions
• Huawei Hg8242H Firmware: all versions

References

• http://www.huawei.com/en/psirt/security-notices/huawei-sn-20181219-01-hg-en
• https://blog.newskysecurity.com/information-disclosure-vulnerability-cve-2018-7900-makes-it-easy-for-attackers-to-find-huawei-3e7039b6f44f
• http://www.huawei.com/en/psirt/security-notices/huawei-sn-20181219-01-hg-en
• https://blog.newskysecurity.com/information-disclosure-vulnerability-cve-2018-7900-makes-it-easy-for-attackers-to-find-huawei-3e7039b6f44f

Get alerted when CVE-2018-7900 or the next vulnerability affects your stack