CVE-2018-7938

P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number, which may cause sensitive information leak.

Score

CVSS 3.0 3.3 Low

Status

Modified - psirt@huawei.com

Published

2018-09-04

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• P10 Firmware (Huawei)
• P10 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180827-01-smartphone-en