Hirouter Cd20 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:huawei:hirouter-cd20_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Huawei (1cc7ae8f-602e-5c48-b475-b8c42c69e952) |
|---|---|
| Product | Hirouter Cd20 Firmware (f35013c9-8ec6-5aa5-947c-fe4b4d35ccde) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-7937 |
vulnerable | 2026-06-08 05:12:04.779161 |
Details available
In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into installing it. Successful exploit could allow the attacker to obtain the root permission of the device and take full control over the device.
Published: 2018-09-04T16:00:00.000Z
Updated: 2024-08-05T06:37:59.688Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7933 |
vulnerable | 2026-06-08 05:12:04.769144 |
Details available
Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traversal vulnerability. Due to the lack of validation while these home gateway products install APK plugins, an attacker tricks a user into installing a malicious APK plugin, and plugin can overwrite arbitrary file of devices. Successful exploit may result in arbitrary code execution or privilege escalation.
Published: 2018-05-10T14:00:00.000Z
Updated: 2024-08-05T06:37:59.671Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.