Vulnerability in Huawei Emily-Al00a
CVE-2018-7944
Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerability. An attacker gets some user's smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP function and use the phone normally.
EPSS: 0.003 (23.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Huawei Emily-al00a
- Huawei Emily-al00a_firmware — versions 8.1.0.106\(sp2c00\), 8.1.0.107(sp5c00), 8.1.0.107\(sp5c00\)
- Huawei Technologies Co., Ltd. Emily-al00a — versions 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-7944?
- CVE-2018-7944 is a medium-severity vulnerability in Huawei Emily-Al00a. CVSS score: 6.8/10. Published 2018-07-05.
- How severe is CVE-2018-7944?
- Medium severity. CVSS v3 base score is 6.8 out of 10.