CVE-2018-7958

Description

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information.

Risk Information

Base Score

7.4

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS Score

Exploitation Probability

0.164

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-17221 ,CVE-2017-17222 ,CVE-2018-7958 ,CVE-2018-7959 ,CVE-2018-7960 are affected in espace_7950_firmware v200r003c30	NCM
Improper Authentication Vulnerability (CVE-2018-7958)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234