Strix
26.1K

CVE-2018-7907

UnknownEPSS 0.66%

Last modified

CVE-2018-7907 is a vulnerability of currently unknown severity. Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. EPSS estimates a 0.66% chance of exploitation in the next 30 days.

Description

Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak.

Metrics

EPSS Probability
0.66%

46.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
HuaweiAgassi-L09 Firmwareags-l09c100b257custc100d001
HuaweiAgassi-L09 Firmwareags-l09c170b253custc170d001
HuaweiAgassi-L09 Firmwareags-l09c199b251custc199d001
HuaweiAgassi-L09 Firmwareags-l09c229b003custc229d001
HuaweiAgassi-W09 Firmwareags-w09c100b257custc100d001
HuaweiAgassi-W09 Firmwareags-w09c128b252custc128d001
HuaweiAgassi-W09 Firmwareags-w09c170b252custc170d001
HuaweiAgassi-W09 Firmwareags-w09c229b251custc229d001
HuaweiAgassi-W09 Firmwareags-w09c331b003custc331d001
HuaweiAgassi-W09 Firmwareags-w09c794b001custc794d001
HuaweiBaggio2-U01a Firmwarebg2-u01c100b160custc100d001
HuaweiBaggio2-U01a Firmwarebg2-u01c170b160custc170d001
HuaweiBaggio2-U01a Firmwarebg2-u01c199b162custc199d001
HuaweiBaggio2-U01a Firmwarebg2-u01c209b160custc209d001
HuaweiBaggio2-U01a Firmwarebg2-u01c333b160custc333d001
HuaweiBond-Al00c Firmwarebond-al00cc00b201
HuaweiBond-Al10b Firmwarebond-al10bc00b201
HuaweiBond-Tl10b Firmwarebond-tl10bc01b201
HuaweiBond-Tl10c Firmwarebond-tl10cc01b131
HuaweiHaydn-L1jb Firmwarehdn-l1jc137b068
HuaweiKobe-L09a Firmwarekob-l09c100b252custc100d001
HuaweiKobe-L09a Firmwarekob-l09c209b002custc209d001
HuaweiKobe-L09a Firmwarekob-l09c362b001custc362d001
HuaweiKobe-L09ahn Firmwarekob-l09c233b226
HuaweiKobe-W09c Firmwarekob-w09c128b251custc128d001
HuaweiLelandp-L22c Firmware8.0.0.101_c675custc675d2
HuaweiLelandp-L22d Firmware8.0.0.101_c675custc675d2
HuaweiRhone-Al00 Firmwarerhone-al00c00b186
HuaweiSelina-L02 Firmwareselina-l02c432b153
HuaweiStanford-L09s Firmwarestanford-l09sc432b183
HuaweiToronto-Al00 Firmwaretoronto-al00c00b223
HuaweiToronto-Al00a Firmwaretoronto-al00ac00b223
HuaweiToronto-Tl10 Firmwaretoronto-tl10c01b223

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2018-7907?
Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak.
How severe is CVE-2018-7907?
Severity scoring for CVE-2018-7907 is pending analysis. The EPSS model estimates a 0.66% probability of exploitation in the next 30 days.
How do I fix CVE-2018-7907?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-7907?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST