CVE-2018-7943
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with...
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
- Record
CVE-2018-7943- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
- Record
CVE-2018-7943- Updated
- 2026-11-02
EUVDEUVD-2018-19655 No score
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
- Record
EUVD-2018-19655- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qp67-v7w7-r9vj
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with...
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
- Record
GHSA-qp67-v7w7-r9vj- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
- huawei 1288h v5 firmware
- huawei 2288h v5 firmware
- huawei 2488 v5 firmware
- huawei ch121 v3 firmware
- huawei ch121 v5 firmware
- huawei ch121l v3 firmware
- huawei ch121l v5 firmware
- huawei ch140 v3 firmware
- huawei ch140l v3 firmware
- huawei ch220 v3 firmware
- huawei ch222 v3 firmware
- huawei ch242 v3 firmware
Show 9 moreShow less
- huawei ch242 v5 firmware
- huawei rh1288 v3 firmware
- huawei rh2288 v3 firmware
- huawei rh2288h v3 firmware
- huawei xh310 v3 firmware
- huawei xh321 v3 firmware
- huawei xh321 v5 firmware
- huawei xh620 v3 firmware
- huawei technologies co., ltd. 1288h v5; 2288h v5; 2488 v5 ; ch121 v3; ch121l v3; ch121l v5 ; ch121 v5 ; ch140 v3; ch140l v3; ch220 v3; ch222 v3; ch242 v3; ch242 v5 ; rh1288 v3; rh2288 v3; rh2288h v3; xh310 v3; xh321 v3; xh321 v5; xh620 v3
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-7943 is a high vulnerability (CVSS 8.8) in Huawei 1288h V5 Firmware, published June 5, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 69th percentile. No source names a fixed version.