CVE-2018-7940
Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations.
- Score
- CVSS 3.0 6.2 Medium
- Status
- Modified - psirt@huawei.com
- Published
- 2018-05-10
- Last modified
- 2024-08-05
- Weaknesses
- CWE-287
Affected products
- Mate 9 Firmware (Huawei)
- Mate 9 Pro Firmware (Huawei)
- Huawei Mate 10 (Huawei Technologies Co. Ltd.)
- Huawei Mate 10 Pro (Huawei Technologies Co. Ltd.)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180509-01-mobile-en
