CVE-2018-7920: Huawei AR1200 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200R006C10SPC300 devices have an improper resource management vulnerability. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the management interface of the affected device to exploit this vulnerability. Successful exploit could exhaust the socket resource of management interface, leading to a DoS condition.

Affected products

• Huawei AR1200 Firmware: version v200r006c10spc300 only
• Huawei AR160 Firmware: version v200r006c10spc300 only
• Huawei AR200 Firmware: version v200r006c10spc300 only
• Huawei AR2200 Firmware: version v200r006c10spc300 only
• Huawei AR3200 Firmware: version v200r006c10spc300 only

Published 2018-04-19. Last modified 2026-06-17.