What is CVE-2018-7976?

CVE-2018-7976 is a medium-severity vulnerability in Huawei Espace Desktop, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2018-06-01.

How severe is CVE-2018-7976?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Huawei Espace Desktop

CVE-2018-7976

There is a stored cross-site scripting (XSS) vulnerability in Huawei eSpace Desktop V300R001C00 and V300R001C50 version. Due to the insufficient validation of the input, an authenticated, remote attacker could exploit this vulnerability to send abnormal messages to the system and perform a XSS attack. A successful exploit could cause the eSpace Desktop to hang up, and the function will restore to normal after restarting the eSpace Desktop.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.006 (43.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Huawei Espace_desktop — versions 300r001c00, 300r001c50
Huawei Technologies Co., Ltd. Espace Desktop — versions V300R001C00, V300R001C50

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-7976?: CVE-2018-7976 is a medium-severity vulnerability in Huawei Espace Desktop, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2018-06-01.
How severe is CVE-2018-7976?: Medium severity. CVSS v3 base score is 5.4 out of 10.