CVE-2018-7920: High severity Huawei Ar1200 Firmware vulnerability
Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200R006C10SPC300 devices have an improper resource management vulnerability. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the management interface of the affected device to exploit this vulnerability. Successful exploit could exhaust the socket resource of management interface, leading to a DoS condition.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-7920.
What is the severity of CVE-2018-7920?
The severity of CVE-2018-7920 is high with a score of 7.5.
Which software versions are affected by CVE-2018-7920?
Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, and AR3200 V200R006C10SPC300 are affected by CVE-2018-7920.
What is the description of CVE-2018-7920?
CVE-2018-7920 is an improper resource management vulnerability in Huawei AR series devices, allowing remote attackers to send TCP messages to the management interface.
Is there a fix available for CVE-2018-7920?
Please refer to the official Huawei security advisory for information on available fixes and mitigations for CVE-2018-7920.