Short Key Vulnerability in Huawei eSpace Product

CVE-2018-7959

Summary

A security flaw exists in Huawei's eSpace product where an unauthenticated, remote attacker can execute a man-in-the-middle attack. By leveraging this vulnerability, attackers can intercept and decrypt call information when users utilize Secure Real-time Transport Protocol (SRTP) for their calls. Exploiting this weakness may lead to the unauthorized disclosure of sensitive information.

References