4.9
CVE-2018-7911
- EPSS 0.24%
- Veröffentlicht 23.10.2018 14:29:04
- Zuletzt bearbeitet 21.11.2024 04:12:57
- Erkennungen
LoginSome Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.106(c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.113(sp2c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.113(sp3c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.113(sp7c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.118(c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.120(sp2c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.125(sp1c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.125(sp3c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.126(sp2c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.126(sp5c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.127(sp1c00)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.128(sp2c00)
Huawei ≫ Alp-al00b-rsc Firmware Version 1.0.0.2
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.113(sp7c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.118(c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.120(sp2c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.125(sp1c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.125(sp2c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.125(sp3c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.126(sp2c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.126(sp5c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.127(sp1c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.128(sp2c01)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.129(sp2c01)
Huawei ≫ Charlotte-al00a Firmware Version 8.1.0.105(sp7c00)
Huawei ≫ Charlotte-al00a Firmware Version 8.1.0.106(sp3c00)
Huawei ≫ Charlotte-al00a Firmware Version 8.1.0.107(sp5c00)
Huawei ≫ Charlotte-al00a Firmware Version 8.1.0.107(sp7c00)
Huawei ≫ Charlotte-al00a Firmware Version 8.1.0.108(sp3c00)
Huawei ≫ Charlotte-al00a Firmware Version 8.1.0.108(sp6c00)
Huawei ≫ Charlotte-al00a Firmware Version 8.1.0.109(sp2c00)
Huawei ≫ Emily-al00a Firmware Version 8.1.0.105(sp6c00)
Huawei ≫ Emily-al00a Firmware Version 8.1.0.106(sp2c00)
Huawei ≫ Emily-al00a Firmware Version 8.1.0.107(sp5c00)
Huawei ≫ Emily-al00a Firmware Version 8.1.0.107(sp7c00)
Huawei ≫ Emily-al00a Firmware Version 8.1.0.108(sp2c00)
Huawei ≫ Emily-al00a Firmware Version 8.1.0.108(sp6c00)
Huawei ≫ Emily-al00a Firmware Version 8.1.0.109(sp5c00)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.144 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.6 | 0.9 | 3.6 |
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
|
| NIST | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:N/I:C/A:N
|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180822-01-frpbypass-en