Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-7958

Опубликовано: 27 нояб. 2018
Источник: nvd
CVSS3: 7.4
CVSS2: 5.8
EPSS Низкий

Описание

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:espace_7950_firmware:v200r003c30:*:*:*:*:*:*:*
cpe:2.3:h:huawei:espace_7950:-:*:*:*:*:*:*:*

EPSS

Процентиль: 38%
0.00164
Низкий

7.4 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.4
github
больше 3 лет назад

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information.

EPSS

Процентиль: 38%
0.00164
Низкий

7.4 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-287