CVE-2018-7961

There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to access malicious Website or malicious App and register. Due to incorrect processing of the smart SMS verification code, successful exploitation can cause sensitive information leak.

Score

CVSS 3.0 6.5 Medium

Status

Modified - psirt@huawei.com

Published

2018-11-27

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Emily-al00a Firmware (Huawei)
• Emily-al00a (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181121-02-smartphone-en