Riskcovery

CVE-2018-7937

State
Published
Severity
Not scored
Published
Sep 4, 2018
Updated
Aug 5, 2024
Reserved
Mar 9, 2018

Read the record on cve.org

Description

In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into installing it. Successful exploit could allow the attacker to obtain the root permission of the device and take full control over the device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
HiRouter-CD20, WS5200-10Huawei Technologies Co., Ltd.
  • The versions before HiRouter-CD20-10 1.9.6, The versions before WS5200-10 1.9.6Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.