CVE-2018-7907: Infoleak

Published Sep 26, 2018
·
Updated

Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak.

Affected Software

52 affected components
Huawei Agassi-l09 Firmware=ags-l09c100b257custc100d001
Huawei Agassi-l09 Firmware=ags-l09c170b253custc170d001
Huawei Agassi-l09 Firmware=ags-l09c199b251custc199d001
Huawei Agassi-l09 Firmware=ags-l09c229b003custc229d001
Huawei Agassi-L09
Huawei Agassi-w09 Firmware=ags-w09c100b257custc100d001
Huawei Agassi-w09 Firmware=ags-w09c128b252custc128d001
Huawei Agassi-w09 Firmware=ags-w09c170b252custc170d001
Huawei Agassi-w09 Firmware=ags-w09c229b251custc229d001
Huawei Agassi-w09 Firmware=ags-w09c331b003custc331d001
Huawei Agassi-w09 Firmware=ags-w09c794b001custc794d001
Huawei Agassi-W09
Huawei Baggio2-u01a Firmware=bg2-u01c100b160custc100d001
Huawei Baggio2-u01a Firmware=bg2-u01c170b160custc170d001
Huawei Baggio2-u01a Firmware=bg2-u01c199b162custc199d001
Huawei Baggio2-u01a Firmware=bg2-u01c209b160custc209d001
Huawei Baggio2-u01a Firmware=bg2-u01c333b160custc333d001
Huawei Baggio2-U01A
Huawei Bond-al00c Firmware=bond-al00cc00b201
Huawei Bond-AL00C
Huawei Bond-al10b Firmware=bond-al10bc00b201
Huawei Bond-AL10B
Huawei Bond-tl10b Firmware=bond-tl10bc01b201
Huawei Bond-TL10B
Huawei Bond-tl10c Firmware=bond-tl10cc01b131
Huawei Bond-TL10C
Huawei Haydn-l1jb Firmware=hdn-l1jc137b068
Huawei Haydn-L1JB
Huawei Kobe-l09a Firmware=kob-l09c100b252custc100d001
Huawei Kobe-l09a Firmware=kob-l09c209b002custc209d001
Huawei Kobe-l09a Firmware=kob-l09c362b001custc362d001
Huawei Kobe-L09A
Huawei Kobe-l09ahn Firmware=kob-l09c233b226
Huawei Kobe-L09AHN
Huawei Kobe-w09c Firmware=kob-w09c128b251custc128d001
Huawei Kobe-W09C
Huawei Lelandp-l22c Firmware=8.0.0.101_c675custc675d2
Huawei LelandP-L22C
Huawei Lelandp-l22d Firmware=8.0.0.101_c675custc675d2
Huawei LelandP-L22D
Huawei Rhone-al00 Firmware=rhone-al00c00b186
Huawei Rhone-AL00
Huawei Selina-l02 Firmware=selina-l02c432b153
Huawei Selina-L02
Huawei Stanford-l09s Firmware=stanford-l09sc432b183
Huawei Stanford-L09S
Huawei Toronto-al00 Firmware=toronto-al00c00b223
Huawei Toronto-AL00
Huawei Toronto-al00a Firmware=toronto-al00ac00b223
Huawei Toronto-AL00A
Huawei Toronto-tl10 Firmware=toronto-tl10c01b223
Huawei Toronto-TL10

Event History

Sep 26, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203