CVE-2018-7937

Name of the Vulnerable Software and Affected Versions: Huawei HiRouter-CD20-10 versions prior to 1.9.6 Huawei WS5200-10 versions prior to 1.9.6

Description: The issue is caused by insufficient plug-in verification, allowing an attacker to tamper with a legitimate plug-in and create a malicious one. This could trick users into installing the malicious plug-in, potentially granting the attacker root permission and full control over the device.

Recommendations: For Huawei HiRouter-CD20-10 versions prior to 1.9.6, update to version 1.9.6 or later to resolve the issue. For Huawei WS5200-10 versions prior to 1.9.6, update to version 1.9.6 or later to resolve the issue.