CWE
200
Advisory Published
Updated

CVE-2018-7907: Infoleak

First published: Wed Sep 26 2018(Updated: )

Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak.

Credit: psirt@huawei.com

Affected SoftwareAffected VersionHow to fix
Huawei Agassi-L09HN Firmware=ags-l09c100b257custc100d001
Huawei Agassi-L09HN Firmware=ags-l09c170b253custc170d001
Huawei Agassi-L09HN Firmware=ags-l09c199b251custc199d001
Huawei Agassi-L09HN Firmware=ags-l09c229b003custc229d001
Huawei Agassi-L09 Firmware
Huawei Agassi-W09=ags-w09c100b257custc100d001
Huawei Agassi-W09=ags-w09c128b252custc128d001
Huawei Agassi-W09=ags-w09c170b252custc170d001
Huawei Agassi-W09=ags-w09c229b251custc229d001
Huawei Agassi-W09=ags-w09c331b003custc331d001
Huawei Agassi-W09=ags-w09c794b001custc794d001
Huawei Agassi-W09HN Firmware
Huawei Baggio2-U01A=bg2-u01c100b160custc100d001
Huawei Baggio2-U01A=bg2-u01c170b160custc170d001
Huawei Baggio2-U01A=bg2-u01c199b162custc199d001
Huawei Baggio2-U01A=bg2-u01c209b160custc209d001
Huawei Baggio2-U01A=bg2-u01c333b160custc333d001
Huawei Baggio2-U01A firmware
Huawei Bond-AL00C=bond-al00cc00b201
Huawei Bond
Huawei Bond-AL10B=bond-al10bc00b201
Huawei Bond-AL10B firmware
Huawei Bond-TL10B=bond-tl10bc01b201
Huawei Figo-TL10B
Huawei Bond-TL10C=bond-tl10cc01b131
Huawei Bond-TL10C firmware
Huawei Haydn-L1JB=hdn-l1jc137b068
Huawei Haydn-L1JB firmware
Huawei Kobe-L09A=kob-l09c100b252custc100d001
Huawei Kobe-L09A=kob-l09c209b002custc209d001
Huawei Kobe-L09A=kob-l09c362b001custc362d001
Huawei Kobe-L09A
Huawei Kobe-L09AHN=kob-l09c233b226
Huawei Kobe-L09AHN firmware
Huawei Kobe-W09C Firmware=kob-w09c128b251custc128d001
Huawei Kobe-W09
Huawei Leland P-L22C Firmware=8.0.0.101_c675custc675d2
Huawei LelandP-L22C Firmware
Huawei Leland P-L22d=8.0.0.101_c675custc675d2
Huawei Leland P-L22d
Huawei Rhone-AL00=rhone-al00c00b186
Huawei Rhone-AL00 firmware
Huawei Selina-L02=selina-l02c432b153
Huawei Selina-L02 firmware
Huawei Stanford-L09S=stanford-l09sc432b183
Huawei Stanford-L09S firmware
Huawei Toronto-AL00=toronto-al00c00b223
Huawei Toronto-AL00
Huawei Toronto-AL00A=toronto-al00ac00b223
Huawei Toronto-AL00A firmware
Huawei Toronto-TL10=toronto-tl10c01b223
Huawei Toronto-TL10 firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203