CVE-2018-7960

There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:huawei:espace_7950_firmware:v200r003c30:*:*:*:*:*:*:*
cpe:2.3:h:huawei:espace_7950:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-11-27 22:29

Updated : 2024-02-28 16:48


NVD link : CVE-2018-7960

Mitre link : CVE-2018-7960

CVE.ORG link : CVE-2018-7960


JSON object : View

Products Affected

huawei

  • espace_7950
  • espace_7950_firmware
CWE
CWE-319

Cleartext Transmission of Sensitive Information