CVE-2018-7959

There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak.

Score

CVSS 3.0 5.9 Medium

Status

Modified - psirt@huawei.com

Published

2018-11-27

Last modified

2024-08-05

Weaknesses

CWE-327

Affected products

• Espace 7950 Firmware (Huawei)
• Espace 7950 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en