Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-7943

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insuff

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
huawei

Description

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Huawei Technologies Co., Ltd. 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3

  • 1288H V5 V100R005C00affected
  • 2288H V5 V100R005C00affected
  • 2488 V5 V100R005C00affected
  • CH121 V3 V100R001C00affected
  • CH121L V3 V100R001C00affected
  • CH121L V5 V100R001C00affected
  • CH121 V5 V100R001C00affected
  • CH140 V3 V100R001C00affected
  • CH140L V3 V100R001C00affected
  • CH220 V3 V100R001C00affected
  • CH222 V3 V100R001C00affected
  • CH242 V3 V100R001C00affected
  • CH242 V5 V100R001C00affected
  • RH1288 V3 V100R003C00affected
  • RH2288 V3 V100R003C00affected
  • RH2288H V3 V100R003C00affected
  • XH310 V3 V100R003C00affected
  • XH321 V3 V100R003C00affected
  • XH321 V5 V100R005C00affected
  • XH620 V3 V100R003C00affected

References