How severe is CVE-2018-7937?

CVE-2018-7937 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2018-7937 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (53rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2018-7937?

CVE-2018-7937 primarily affects Huawei Hirouter-cd20 Firmware. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2018-7937?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2018-7937 published?

CVE-2018-7937 was published on 2018-09-04 and last updated on 2026-06-17.

CVE-2018-7937

CVE-2018-7937 is a high-severity vulnerability in Huawei Hirouter-cd20 Firmware with a CVSS 3.x base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.8)
CVSS v2: 9.3
EPSS exploit prediction: 1% (53rd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Huawei Hirouter-cd20 Firmware
Published: 2018-09-04
Last modified: 2026-06-17

Description

In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into installing it. Successful exploit could allow the attacker to obtain the root permission of the device and take full control over the device.

Frequently asked questions

What is CVE-2018-7937?: In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into installing it. Successful exploit could allow the attacker to obtain the root permission of the device and take full control over the device.
How severe is CVE-2018-7937?: CVE-2018-7937 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2018-7937 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (53rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2018-7937?: CVE-2018-7937 primarily affects Huawei Hirouter-cd20 Firmware. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2018-7937?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2018-7937 published?: CVE-2018-7937 was published on 2018-09-04 and last updated on 2026-06-17.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180827-01-gateway-en

Affected products (2)

cpe:2.3:o:huawei:hirouter-cd20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:huawei:ws5200-10_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Huawei Hirouter-cd20 Firmware

CVE-2018-7933 — High (CVSS 7.8): Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions…

All CVEs affecting Huawei Hirouter-cd20 Firmware →