Information disclosure in Huawei…
Priority LOW 26CWE-200Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak.
Why it matters now
EPSS 0.00658 51st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | Agassi-L09,Agassi-W09,Baggio2-U01A,Bond-AL00C,Bond-AL10B,Bond-TL10B,Bond-TL10C,Haydn-L1JB,Kobe-L09A,Kobe-L09AHN,Kobe-W09C,LelandP-L22C,LelandP-L22D,Rhone-AL00,Selina-L02,Stanford-L09S,Toronto-AL00,Toronto-AL00A,Toronto-TL10 | all versions | — | No fix listed | CNA |
- Agassi-L09,Agassi-W09,Baggio2-U01A,Bond-AL00C,Bond-AL10B,Bond-TL10B,Bond-TL10C,Haydn-L1JB,Kobe-L09A,Kobe-L09AHN,Kobe-W09C,LelandP-L22C,LelandP-L22D,Rhone-AL00,Selina-L02,Stanford-L09S,Toronto-AL00,Toronto-AL00A,Toronto-TL10 VendorHuawei Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 52
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:agassi-l09_firmware:ags-l09c100b257custc100d001:*:*:*:*:*:*:* | ags-l09c100b257custc100d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:agassi-l09_firmware:ags-l09c170b253custc170d001:*:*:*:*:*:*:* | ags-l09c170b253custc170d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:agassi-l09_firmware:ags-l09c199b251custc199d001:*:*:*:*:*:*:* | ags-l09c199b251custc199d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:agassi-l09_firmware:ags-l09c229b003custc229d001:*:*:*:*:*:*:* | ags-l09c229b003custc229d001 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:agassi-l09:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c100b257custc100d001:*:*:*:*:*:*:* | ags-w09c100b257custc100d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c128b252custc128d001:*:*:*:*:*:*:* | ags-w09c128b252custc128d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c170b252custc170d001:*:*:*:*:*:*:* | ags-w09c170b252custc170d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c229b251custc229d001:*:*:*:*:*:*:* | ags-w09c229b251custc229d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c331b003custc331d001:*:*:*:*:*:*:* | ags-w09c331b003custc331d001 | Vulnerable | Huawei |
- cpe:2.3:o:huawei:agassi-l09_firmware:ags-l09c100b257custc100d001:*:*:*:*:*:*:* Versions ags-l09c100b257custc100d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:agassi-l09_firmware:ags-l09c170b253custc170d001:*:*:*:*:*:*:* Versions ags-l09c170b253custc170d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:agassi-l09_firmware:ags-l09c199b251custc199d001:*:*:*:*:*:*:* Versions ags-l09c199b251custc199d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:agassi-l09_firmware:ags-l09c229b003custc229d001:*:*:*:*:*:*:* Versions ags-l09c229b003custc229d001 Vulnerable ·Huawei
- cpe:2.3:h:huawei:agassi-l09:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c100b257custc100d001:*:*:*:*:*:*:* Versions ags-w09c100b257custc100d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c128b252custc128d001:*:*:*:*:*:*:* Versions ags-w09c128b252custc128d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c170b252custc170d001:*:*:*:*:*:*:* Versions ags-w09c170b252custc170d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c229b251custc229d001:*:*:*:*:*:*:* Versions ags-w09c229b251custc229d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c331b003custc331d001:*:*:*:*:*:*:* Versions ags-w09c331b003custc331d001 Vulnerable ·Huawei
Show 42 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c794b001custc794d001:*:*:*:*:*:*:* | ags-w09c794b001custc794d001 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:agassi-w09:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c100b160custc100d001:*:*:*:*:*:*:* | bg2-u01c100b160custc100d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c170b160custc170d001:*:*:*:*:*:*:* | bg2-u01c170b160custc170d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c199b162custc199d001:*:*:*:*:*:*:* | bg2-u01c199b162custc199d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c209b160custc209d001:*:*:*:*:*:*:* | bg2-u01c209b160custc209d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c333b160custc333d001:*:*:*:*:*:*:* | bg2-u01c333b160custc333d001 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:baggio2-u01a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:bond-al00c_firmware:bond-al00cc00b201:*:*:*:*:*:*:* | bond-al00cc00b201 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:bond-al00c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:bond-al10b_firmware:bond-al10bc00b201:*:*:*:*:*:*:* | bond-al10bc00b201 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:bond-al10b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:bond-tl10b_firmware:bond-tl10bc01b201:*:*:*:*:*:*:* | bond-tl10bc01b201 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:bond-tl10b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:bond-tl10c_firmware:bond-tl10cc01b131:*:*:*:*:*:*:* | bond-tl10cc01b131 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:bond-tl10c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:haydn-l1jb_firmware:hdn-l1jc137b068:*:*:*:*:*:*:* | hdn-l1jc137b068 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:haydn-l1jb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:kobe-l09a_firmware:kob-l09c100b252custc100d001:*:*:*:*:*:*:* | kob-l09c100b252custc100d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:kobe-l09a_firmware:kob-l09c209b002custc209d001:*:*:*:*:*:*:* | kob-l09c209b002custc209d001 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:kobe-l09a_firmware:kob-l09c362b001custc362d001:*:*:*:*:*:*:* | kob-l09c362b001custc362d001 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:kobe-l09a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:kobe-l09ahn_firmware:kob-l09c233b226:*:*:*:*:*:*:* | kob-l09c233b226 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:kobe-l09ahn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:kobe-w09c_firmware:kob-w09c128b251custc128d001:*:*:*:*:*:*:* | kob-w09c128b251custc128d001 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:kobe-w09c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:lelandp-l22c_firmware:8.0.0.101_c675custc675d2:*:*:*:*:*:*:* | 8.0.0.101_c675custc675d2 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:lelandp-l22c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:lelandp-l22d_firmware:8.0.0.101_c675custc675d2:*:*:*:*:*:*:* | 8.0.0.101_c675custc675d2 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:lelandp-l22d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:rhone-al00_firmware:rhone-al00c00b186:*:*:*:*:*:*:* | rhone-al00c00b186 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:rhone-al00:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:selina-l02_firmware:selina-l02c432b153:*:*:*:*:*:*:* | selina-l02c432b153 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:selina-l02:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:stanford-l09s_firmware:stanford-l09sc432b183:*:*:*:*:*:*:* | stanford-l09sc432b183 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:stanford-l09s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:toronto-al00_firmware:toronto-al00c00b223:*:*:*:*:*:*:* | toronto-al00c00b223 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:toronto-al00:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:toronto-al00a_firmware:toronto-al00ac00b223:*:*:*:*:*:*:* | toronto-al00ac00b223 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:toronto-al00a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:toronto-tl10_firmware:toronto-tl10c01b223:*:*:*:*:*:*:* | toronto-tl10c01b223 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:toronto-tl10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:agassi-w09_firmware:ags-w09c794b001custc794d001:*:*:*:*:*:*:* Versions ags-w09c794b001custc794d001 Vulnerable ·Huawei
- cpe:2.3:h:huawei:agassi-w09:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c100b160custc100d001:*:*:*:*:*:*:* Versions bg2-u01c100b160custc100d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c170b160custc170d001:*:*:*:*:*:*:* Versions bg2-u01c170b160custc170d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c199b162custc199d001:*:*:*:*:*:*:* Versions bg2-u01c199b162custc199d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c209b160custc209d001:*:*:*:*:*:*:* Versions bg2-u01c209b160custc209d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:baggio2-u01a_firmware:bg2-u01c333b160custc333d001:*:*:*:*:*:*:* Versions bg2-u01c333b160custc333d001 Vulnerable ·Huawei
- cpe:2.3:h:huawei:baggio2-u01a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:bond-al00c_firmware:bond-al00cc00b201:*:*:*:*:*:*:* Versions bond-al00cc00b201 Vulnerable ·Huawei
- cpe:2.3:h:huawei:bond-al00c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:bond-al10b_firmware:bond-al10bc00b201:*:*:*:*:*:*:* Versions bond-al10bc00b201 Vulnerable ·Huawei
- cpe:2.3:h:huawei:bond-al10b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:bond-tl10b_firmware:bond-tl10bc01b201:*:*:*:*:*:*:* Versions bond-tl10bc01b201 Vulnerable ·Huawei
- cpe:2.3:h:huawei:bond-tl10b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:bond-tl10c_firmware:bond-tl10cc01b131:*:*:*:*:*:*:* Versions bond-tl10cc01b131 Vulnerable ·Huawei
- cpe:2.3:h:huawei:bond-tl10c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:haydn-l1jb_firmware:hdn-l1jc137b068:*:*:*:*:*:*:* Versions hdn-l1jc137b068 Vulnerable ·Huawei
- cpe:2.3:h:huawei:haydn-l1jb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:kobe-l09a_firmware:kob-l09c100b252custc100d001:*:*:*:*:*:*:* Versions kob-l09c100b252custc100d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:kobe-l09a_firmware:kob-l09c209b002custc209d001:*:*:*:*:*:*:* Versions kob-l09c209b002custc209d001 Vulnerable ·Huawei
- cpe:2.3:o:huawei:kobe-l09a_firmware:kob-l09c362b001custc362d001:*:*:*:*:*:*:* Versions kob-l09c362b001custc362d001 Vulnerable ·Huawei
- cpe:2.3:h:huawei:kobe-l09a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:kobe-l09ahn_firmware:kob-l09c233b226:*:*:*:*:*:*:* Versions kob-l09c233b226 Vulnerable ·Huawei
- cpe:2.3:h:huawei:kobe-l09ahn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:kobe-w09c_firmware:kob-w09c128b251custc128d001:*:*:*:*:*:*:* Versions kob-w09c128b251custc128d001 Vulnerable ·Huawei
- cpe:2.3:h:huawei:kobe-w09c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:lelandp-l22c_firmware:8.0.0.101_c675custc675d2:*:*:*:*:*:*:* Versions 8.0.0.101_c675custc675d2 Vulnerable ·Huawei
- cpe:2.3:h:huawei:lelandp-l22c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:lelandp-l22d_firmware:8.0.0.101_c675custc675d2:*:*:*:*:*:*:* Versions 8.0.0.101_c675custc675d2 Vulnerable ·Huawei
- cpe:2.3:h:huawei:lelandp-l22d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:rhone-al00_firmware:rhone-al00c00b186:*:*:*:*:*:*:* Versions rhone-al00c00b186 Vulnerable ·Huawei
- cpe:2.3:h:huawei:rhone-al00:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:selina-l02_firmware:selina-l02c432b153:*:*:*:*:*:*:* Versions selina-l02c432b153 Vulnerable ·Huawei
- cpe:2.3:h:huawei:selina-l02:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:stanford-l09s_firmware:stanford-l09sc432b183:*:*:*:*:*:*:* Versions stanford-l09sc432b183 Vulnerable ·Huawei
- cpe:2.3:h:huawei:stanford-l09s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:toronto-al00_firmware:toronto-al00c00b223:*:*:*:*:*:*:* Versions toronto-al00c00b223 Vulnerable ·Huawei
- cpe:2.3:h:huawei:toronto-al00:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:toronto-al00a_firmware:toronto-al00ac00b223:*:*:*:*:*:*:* Versions toronto-al00ac00b223 Vulnerable ·Huawei
- cpe:2.3:h:huawei:toronto-al00a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:toronto-tl10_firmware:toronto-tl10c01b223:*:*:*:*:*:*:* Versions toronto-tl10c01b223 Vulnerable ·Huawei
- cpe:2.3:h:huawei:toronto-tl10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-7907
- 2026-10-03 Alias added: GHSA-jfjg-57gc-4w4g
- 2026-10-11 EPSS moved to the 50th–90th percentile
References
Sources
- CVE-2018-7907 · CVE Program
- CVE-2018-7907 · NVD
- FIRST EPSS
- GHSA-jfjg-57gc-4w4g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences