6.5med
CVE-2018-7961
There is a smart SMS verification code vulnerability in some Huawei smart phones.
Published 7 y ago · modified 4 mo ago · JSON
CVSS
6.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.9%
percentile 60%
Public exploits
0
none known
Summary
There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to access malicious Website or malicious App and register. Due to incorrect processing of the smart SMS verification code, successful exploitation can cause sensitive information leak.
Exploit prediction (EPSS)
0.90% probability of exploitation in the next 30 days, higher than 60% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 6.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Affected products
- Huawei Technologies Co., Ltd. Emily-AL00A
Classification
- Weakness
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
- huawei.com /en/psirt/security-advisories/huawei-sa-20181121-02-smartphone-en · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-7961
- NVD: CVE-2018-7961
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.