CVE-2018-7959

There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak.

Date published : 2018-11-27

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en