What’s Vulnerable › Vulnerabilities

CVE-2018-7943

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-05 · updated 2026-06-17
• Weakness: CWE-287

Description

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.

Affected products

• Huawei 1288H V5 Firmware: v100r005c00
• Huawei 2288H V5 Firmware: v100r005c00
• Huawei 2488 V5 Firmware: v100r005c00
• Huawei Ch121 V3 Firmware: v100r001c00
• Huawei Ch121 V5 Firmware: v100r001c00
• Huawei Ch121L V3 Firmware: v100r001c00
• Huawei Ch121L V5 Firmware: v100r001c00
• Huawei Ch140 V3 Firmware: v100r001c00
• Huawei Ch140L V3 Firmware: v100r001c00
• Huawei Ch220 V3 Firmware: v100r001c00
• Huawei Ch222 V3 Firmware: v100r001c00
• Huawei Ch242 V3 Firmware: v100r001c00
• Huawei Ch242 V5 Firmware: v100r001c00
• Huawei Rh1288 V3 Firmware: v100r003c00
• Huawei Rh2288 V3 Firmware: v100r003c00
• Huawei Rh2288H V3 Firmware: v100r003c00
• Huawei Xh310 V3 Firmware: v100r003c00
• Huawei Xh321 V3 Firmware: v100r003c00
• Huawei Xh321 V5 Firmware: v100r005c00
• Huawei Xh620 V3 Firmware: v100r003c00

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-server-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-server-en

Get alerted when CVE-2018-7943 or the next vulnerability affects your stack