CVE-2018-7904

Description

Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.128

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-7902 ,CVE-2018-7903 ,CVE-2018-7904 ,CVE-2018-7943 are affected in 1288h_v5_firmware v100r005c00	NCM
CVE-2018-7904	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234