CVE-2018-7943
published 2018-06-05CVE-2018-7943: There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special…
high8.8CVSS 3.0
AVNACLPRLUINSUCHIHAH
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huawei | 1288h_v5_firmware | — | — |
| huawei | 2288h_v5_firmware | — | — |
| huawei | 2488_v5_firmware | — | — |
| huawei | ch121_v3_firmware | — | — |
| huawei | ch121_v5_firmware | — | — |
| huawei | ch121l_v3_firmware | — | — |
| huawei | ch121l_v5_firmware | — | — |
| huawei | ch140_v3_firmware | — | — |
| huawei | ch140l_v3_firmware | — | — |
| huawei | ch220_v3_firmware | — | — |
| huawei | ch222_v3_firmware | — | — |
| huawei | ch242_v3_firmware | — | — |
| huawei | ch242_v5_firmware | — | — |
| huawei | rh1288_v3_firmware | — | — |
| huawei | rh2288_v3_firmware | — | — |
| huawei | rh2288h_v3_firmware | — | — |
| huawei | xh310_v3_firmware | — | — |
| huawei | xh321_v3_firmware | — | — |
| huawei | xh321_v5_firmware | — | — |
| huawei | xh620_v3_firmware | — | — |
| x.org | libx11 | >= 0 < 2:1.6.2-1ubuntu2.1 | 2:1.6.2-1ubuntu2.1 |
| x.org | libx11 | >= 0 < 2:1.6.3-1ubuntu2.1 | 2:1.6.3-1ubuntu2.1 |
| x.org | libx11 | >= 0 < 2:1.6.4-3ubuntu0.1 | 2:1.6.4-3ubuntu0.1 |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL