{"schemaVersion":3,"id":"CVE-2018-7907","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak.","dates":{"published":"2018-09-26T13:00:00.000Z","modified":"2024-08-05T06:37:59.653Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.5,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00658,"percentile":0.50602,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00658},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00658,"percentile":0.50602}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00794,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00658,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00658,"percentile":0.50602}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"}],"affected":[{"vendor":"huawei","product":"agassi-l09_firmware","name":"agassi-l09 firmware","label":"agassi-l09_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"ags-l09c100b257custc100d001","noFixRecorded":false,"fixedIn":null},{"text":"ags-l09c170b253custc170d001","noFixRecorded":false,"fixedIn":null},{"text":"ags-l09c199b251custc199d001","noFixRecorded":false,"fixedIn":null},{"text":"ags-l09c229b003custc229d001","noFixRecorded":false,"fixedIn":null}],"versionsText":"ags-l09c100b257custc100d001 | ags-l09c170b253custc170d001 | ags-l09c199b251custc199d001 | ags-l09c229b003custc229d001","eol":null,"hubHref":"/vendor/huawei/agassi-l09"},{"vendor":"huawei","product":"agassi-w09_firmware","name":"agassi-w09 firmware","label":"agassi-w09_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"ags-w09c100b257custc100d001","noFixRecorded":false,"fixedIn":null},{"text":"ags-w09c128b252custc128d001","noFixRecorded":false,"fixedIn":null},{"text":"ags-w09c170b252custc170d001","noFixRecorded":false,"fixedIn":null},{"text":"ags-w09c229b251custc229d001","noFixRecorded":false,"fixedIn":null},{"text":"ags-w09c331b003custc331d001","noFixRecorded":false,"fixedIn":null},{"text":"ags-w09c794b001custc794d001","noFixRecorded":false,"fixedIn":null}],"versionsText":"ags-w09c100b257custc100d001 | ags-w09c128b252custc128d001 | ags-w09c170b252custc170d001 | ags-w09c229b251custc229d001 | ags-w09c331b003custc331d001 | ags-w09c794b001custc794d001","eol":null,"hubHref":"/vendor/huawei/agassi-w09"},{"vendor":"huawei","product":"baggio2-u01a_firmware","name":"baggio2-u01a firmware","label":"baggio2-u01a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"bg2-u01c100b160custc100d001","noFixRecorded":false,"fixedIn":null},{"text":"bg2-u01c170b160custc170d001","noFixRecorded":false,"fixedIn":null},{"text":"bg2-u01c199b162custc199d001","noFixRecorded":false,"fixedIn":null},{"text":"bg2-u01c209b160custc209d001","noFixRecorded":false,"fixedIn":null},{"text":"bg2-u01c333b160custc333d001","noFixRecorded":false,"fixedIn":null}],"versionsText":"bg2-u01c100b160custc100d001 | bg2-u01c170b160custc170d001 | bg2-u01c199b162custc199d001 | bg2-u01c209b160custc209d001 | bg2-u01c333b160custc333d001","eol":null,"hubHref":"/vendor/huawei/baggio2-u01a"},{"vendor":"huawei","product":"bond-al00c_firmware","name":"bond-al00c firmware","label":"bond-al00c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"bond-al00cc00b201","noFixRecorded":false,"fixedIn":null}],"versionsText":"bond-al00cc00b201","eol":null,"hubHref":"/vendor/huawei/bond-al00c"},{"vendor":"huawei","product":"bond-al10b_firmware","name":"bond-al10b firmware","label":"bond-al10b_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"bond-al10bc00b201","noFixRecorded":false,"fixedIn":null}],"versionsText":"bond-al10bc00b201","eol":null,"hubHref":"/vendor/huawei/bond-al10b"},{"vendor":"huawei","product":"bond-tl10b_firmware","name":"bond-tl10b firmware","label":"bond-tl10b_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"bond-tl10bc01b201","noFixRecorded":false,"fixedIn":null}],"versionsText":"bond-tl10bc01b201","eol":null,"hubHref":"/vendor/huawei/bond-tl10b"},{"vendor":"huawei","product":"bond-tl10c_firmware","name":"bond-tl10c firmware","label":"bond-tl10c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"bond-tl10cc01b131","noFixRecorded":false,"fixedIn":null}],"versionsText":"bond-tl10cc01b131","eol":null,"hubHref":"/vendor/huawei/bond-tl10c"},{"vendor":"huawei","product":"haydn-l1jb_firmware","name":"haydn-l1jb firmware","label":"haydn-l1jb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"hdn-l1jc137b068","noFixRecorded":false,"fixedIn":null}],"versionsText":"hdn-l1jc137b068","eol":null,"hubHref":"/vendor/huawei/haydn-l1jb"},{"vendor":"huawei","product":"kobe-l09a_firmware","name":"kobe-l09a firmware","label":"kobe-l09a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"kob-l09c100b252custc100d001","noFixRecorded":false,"fixedIn":null},{"text":"kob-l09c209b002custc209d001","noFixRecorded":false,"fixedIn":null},{"text":"kob-l09c362b001custc362d001","noFixRecorded":false,"fixedIn":null}],"versionsText":"kob-l09c100b252custc100d001 | kob-l09c209b002custc209d001 | kob-l09c362b001custc362d001","eol":null,"hubHref":"/vendor/huawei/kobe-l09a"},{"vendor":"huawei","product":"kobe-l09ahn_firmware","name":"kobe-l09ahn firmware","label":"kobe-l09ahn_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"kob-l09c233b226","noFixRecorded":false,"fixedIn":null}],"versionsText":"kob-l09c233b226","eol":null,"hubHref":"/vendor/huawei/kobe-l09ahn"},{"vendor":"huawei","product":"kobe-w09c_firmware","name":"kobe-w09c firmware","label":"kobe-w09c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"kob-w09c128b251custc128d001","noFixRecorded":false,"fixedIn":null}],"versionsText":"kob-w09c128b251custc128d001","eol":null,"hubHref":"/vendor/huawei/kobe-w09c"},{"vendor":"huawei","product":"lelandp-l22c_firmware","name":"lelandp-l22c firmware","label":"lelandp-l22c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0.0.101_c675custc675d2","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0.0.101_c675custc675d2","eol":null,"hubHref":"/vendor/huawei/lelandp-l22c"},{"vendor":"huawei","product":"lelandp-l22d_firmware","name":"lelandp-l22d firmware","label":"lelandp-l22d_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0.0.101_c675custc675d2","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0.0.101_c675custc675d2","eol":null,"hubHref":"/vendor/huawei/lelandp-l22d"},{"vendor":"huawei","product":"rhone-al00_firmware","name":"rhone-al00 firmware","label":"rhone-al00_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"rhone-al00c00b186","noFixRecorded":false,"fixedIn":null}],"versionsText":"rhone-al00c00b186","eol":null,"hubHref":"/vendor/huawei/rhone-al00"},{"vendor":"huawei","product":"selina-l02_firmware","name":"selina-l02 firmware","label":"selina-l02_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"selina-l02c432b153","noFixRecorded":false,"fixedIn":null}],"versionsText":"selina-l02c432b153","eol":null,"hubHref":"/vendor/huawei/selina-l02"},{"vendor":"huawei","product":"stanford-l09s_firmware","name":"stanford-l09s firmware","label":"stanford-l09s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"stanford-l09sc432b183","noFixRecorded":false,"fixedIn":null}],"versionsText":"stanford-l09sc432b183","eol":null,"hubHref":"/vendor/huawei/stanford-l09s"},{"vendor":"huawei","product":"toronto-al00_firmware","name":"toronto-al00 firmware","label":"toronto-al00_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"toronto-al00c00b223","noFixRecorded":false,"fixedIn":null}],"versionsText":"toronto-al00c00b223","eol":null,"hubHref":"/vendor/huawei/toronto-al00"},{"vendor":"huawei","product":"toronto-al00a_firmware","name":"toronto-al00a firmware","label":"toronto-al00a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"toronto-al00ac00b223","noFixRecorded":false,"fixedIn":null}],"versionsText":"toronto-al00ac00b223","eol":null,"hubHref":"/vendor/huawei/toronto-al00a"},{"vendor":"huawei","product":"toronto-tl10_firmware","name":"toronto-tl10 firmware","label":"toronto-tl10_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"toronto-tl10c01b223","noFixRecorded":false,"fixedIn":null}],"versionsText":"toronto-tl10c01b223","eol":null,"hubHref":"/vendor/huawei/toronto-tl10"}],"affectedCount":19,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180919-02-smartphone-en","label":"www.huawei.com/en/psirt/security-advisories/huawei-sa-20180919-02-smartphone-en","hostname":"www.huawei.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-09-26T13:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T06:37:59.653Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:11:35.987Z","stale":false,"partial":false}}