CVE-2018-7920
High
Description
Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200R006C10SPC300 devices have an improper resource management vulnerability. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the management interface of the affected device to exploit this vulnerability. Successful exploit could exhaust the socket resource of management interface, leading to a DoS condition.
SeverityHigh
CVSS7.5
Exploit probability—
ProductHuawei Ar1200 Firmware
PublishedApr 19, 2018
First seenApr 19, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei ar1200_firmware | v200r006c10spc300 | — |
| huawei ar160_firmware | v200r006c10spc300 | — |
| huawei ar200_firmware | v200r006c10spc300 | — |
| huawei ar2200_firmware | v200r006c10spc300 | — |
| huawei ar3200_firmware | v200r006c10spc300 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.