vulnwire
4.6med

CVE-2018-7936

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vuln…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
4.6
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 15%
Public exploits
0
none known

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable the boot wizard. As a result, the FRP function is bypassed.

Exploit prediction (EPSS)

0.24% probability of exploitation in the next 30 days, higher than 15% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.04.6CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD2.04.9AV:L/AC:L/Au:N/C:N/I:C/A:N

Affected products

  • Huawei Technologies Co., Ltd. Mate 10 Pro

References

  • huawei.com /en/psirt/security-advisories/huawei-sa-20180827-01-frpbypass-en · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.