CVE-2018-7933
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-7933
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traversal vulnerability. Due to the lack of validation while these home gateway products install APK plugins, an attacker tricks a user into installing a malicious APK plugin, and plugin can overwrite arbitrary file of devices. Successful exploit may result in arbitrary code execution or privilege escalation.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Huawei HiRouter-CD20和WS5200 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei HiRouter-CD20和WS5200都是中国华为（Huawei）公司发布的家庭路由器产品。 Huawei HiRouter-CD20 HiRouter-CD20-10 1.9.6之前版本和WS5200 WS5200-10 1.9.6之前版本中存在路径遍历漏洞，该漏洞源于程序在安装APK插件时校验不足。攻击者可通过诱使用户安装可以覆盖设备中任意文件的恶意APK插件利用该漏洞执行任意代码或提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Huawei Technologies Co., Ltd. | HiRouter-CD20, WS5200 | HiRouter-CD20 The versions before HiRouter-CD20-10 1.9.6, WS5200 The versions before WS5200-10 1.9.6 | - |
II. Public POCs for CVE-2018-7933
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-7933
请登录查看更多情报信息。
Same Patch Batch · Huawei Technologies Co., Ltd. · 2018-05-10 · 3 CVEs total
| CVE-2018-7940 | Huawei Mate 10和Mate 10 Pro 安全漏洞 | |
| CVE-2018-7941 | Huawei iBMC 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2018-7933
No comments yet