CVEvulnerability

CVE-2018-7911

4.6 MEDIUM Published 2018-10-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.6 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:C/A:N

Description

Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed.

Affected configurations

• huawei alp-al00b firmware 8.0.0.106\(c00\) • huawei alp-al00b firmware 8.0.0.113\(sp2c00\) • huawei alp-al00b firmware 8.0.0.113\(sp3c00\) • huawei alp-al00b firmware 8.0.0.113\(sp7c00\) • huawei alp-al00b firmware 8.0.0.118\(c00\) • huawei alp-al00b firmware 8.0.0.120\(sp2c00\) • huawei alp-al00b firmware 8.0.0.125\(sp1c00\) • huawei alp-al00b firmware 8.0.0.125\(sp3c00\) • huawei alp-al00b firmware 8.0.0.126\(sp2c00\) • huawei alp-al00b firmware 8.0.0.126\(sp5c00\) • huawei alp-al00b firmware 8.0.0.127\(sp1c00\) • huawei alp-al00b firmware 8.0.0.128\(sp2c00\) • huawei alp-al00b-rsc firmware 1.0.0.2 • huawei bla-tl00b firmware 8.0.0.113\(sp7c01\) • huawei bla-tl00b firmware 8.0.0.118\(c01\) • huawei bla-tl00b firmware 8.0.0.120\(sp2c01\) • huawei bla-tl00b firmware 8.0.0.125\(sp1c01\) • huawei bla-tl00b firmware 8.0.0.125\(sp2c01\) • huawei bla-tl00b firmware 8.0.0.125\(sp3c01\) • huawei bla-tl00b firmware 8.0.0.126\(sp2c01\) • huawei bla-tl00b firmware 8.0.0.126\(sp5c01\) • huawei bla-tl00b firmware 8.0.0.127\(sp1c01\) • huawei bla-tl00b firmware 8.0.0.128\(sp2c01\) • huawei bla-tl00b firmware 8.0.0.129\(sp2c01\) • huawei charlotte-al00a firmware 8.1.0.105\(sp7c00\) • huawei charlotte-al00a firmware 8.1.0.106\(sp3c00\) • huawei charlotte-al00a firmware 8.1.0.107\(sp5c00\) • huawei charlotte-al00a firmware 8.1.0.107\(sp7c00\) • huawei charlotte-al00a firmware 8.1.0.108\(sp3c00\) • huawei charlotte-al00a firmware 8.1.0.108\(sp6c00\) • huawei charlotte-al00a firmware 8.1.0.109\(sp2c00\) • huawei emily-al00a firmware 8.1.0.105\(sp6c00\) • huawei emily-al00a firmware 8.1.0.106\(sp2c00\) • huawei emily-al00a firmware 8.1.0.107\(sp5c00\) • huawei emily-al00a firmware 8.1.0.107\(sp7c00\) • huawei emily-al00a firmware 8.1.0.108\(sp2c00\) • huawei emily-al00a firmware 8.1.0.108\(sp6c00\) • huawei emily-al00a firmware 8.1.0.109\(sp5c00\)

References