CVE-2018-7943: Huawei 1288h v5 Firmware

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.

Affected products

• Huawei 1288h v5 Firmware: version v100r005c00 only
• Huawei 2288h v5 Firmware: version v100r005c00 only
• Huawei 2488 v5 Firmware: version v100r005c00 only
• Huawei CH121 v3 Firmware: version v100r001c00 only
• Huawei CH121 v5 Firmware: version v100r001c00 only
• Huawei CH121L v3 Firmware: version v100r001c00 only
• Huawei CH121L v5 Firmware: version v100r001c00 only
• Huawei CH140 v3 Firmware: version v100r001c00 only
• Huawei CH140L v3 Firmware: version v100r001c00 only
• Huawei CH220 v3 Firmware: version v100r001c00 only
• Huawei CH222 v3 Firmware: version v100r001c00 only
• Huawei CH242 v3 Firmware: version v100r001c00 only
• Huawei CH242 v5 Firmware: version v100r001c00 only
• Huawei RH1288 v3 Firmware: version v100r003c00 only
• Huawei RH2288 v3 Firmware: version v100r003c00 only
• Huawei RH2288H v3 Firmware: version v100r003c00 only
• Huawei XH310 v3 Firmware: version v100r003c00 only
• Huawei XH321 v3 Firmware: version v100r003c00 only
• Huawei XH321 v5 Firmware: version v100r005c00 only
• Huawei XH620 v3 Firmware: version v100r003c00 only

Published 2018-06-05. Last modified 2026-06-17.