Vulnerability Bulletins

CVE-2018-7959

   
Affected software HUAWEI
 
There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2018-7959