CVE-2018-7960 Information disclosure in eSpace 7950
An attacker can intercept and tamper with call information via a man-in-the-middle attack on Huawei eSpace devices using non-secure transmission.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-7960?
CVE-2018-7960 is a high-severity vulnerability in Huawei Technologies Co., Ltd. eSpace 7950, published on 27 Nov 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak.
Weakness: CWE-319
Which versions are affected by CVE-2018-7960?
It affects 1 product.
Products include Huawei Espace 7950 Firmware.
How do I fix CVE-2018-7960?
No fix has been published for CVE-2018-7960 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-7960 being exploited?
There is no known exploitation of CVE-2018-7960 in the wild and no public exploit code.
Other vulnerabilities in Huawei Technologies Co., Ltd. eSpace 7950
Sources
Also known as GHSA-pgjp-266f-j96q.