CVE-2018-7958 | BDVDB-2026-109798 Detail

Description#

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-11-27Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.