3.9low
CVE-2018-7947
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
3.9
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 15%
Public exploits
0
none known
Summary
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones.
Exploit prediction (EPSS)
0.24% probability of exploitation in the next 30 days, higher than 15% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 3.9 | CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L |
| NVD | 2.0 | 4.4 | AV:L/AC:M/Au:N/C:P/I:P/A:P |
Affected products
- Huawei Technologies Co., Ltd. Emily-AL00A
Classification
- Weakness
- CWE-287 Improper Authentication
References
- huawei.com /en/psirt/security-advisories/huawei-sa-20180720-01-mobile-en · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-7947
- NVD: CVE-2018-7947
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.