CVEvulnerability

CVE-2018-7947

3.9 LOW Published 2018-07-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
3.9 LOW — CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones.

Affected configurations

• huawei emily-al00a firmware (< 8.1.0.153\(c00\))

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References