QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-7933

Back to search

CVE-2018-7933

Published: May 10, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traversal vulnerability. Due to the lack of validation while these home gateway products install APK plugins, an attacker tricks a user into installing a malicious APK plugin, and plugin can overwrite arbitrary file of devices. Successful exploit may result in arbitrary code execution or privilege escalation.

VendorProductVersions

Huawei Technologies Co., Ltd.

HiRouter-CD20, WS5200

affected
HiRouter-CD20 The versions before HiRouter-CD20-10 1.9.6, WS5200 The versions before WS5200-10 1.9.6

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now