Huawei Technologies Co Ltd Espace 7950 vulnerabilities

CVE-2018-7958 [HIGH] CWE-287 CVE-2018-7958: There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthe There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information.

CVE-2018-7960 [HIGH] CWE-319 CVE-2018-7960: There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote atta There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak.

CVE-2018-7959 [MEDIUM] CWE-327 CVE-2018-7959: There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker lau There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak.