CVE-2018-7936

EPSS 0.03%
Veröffentlicht 04.09.2018 16:29:00
Zuletzt bearbeitet 21.11.2024 04:12:59
Quelle psirt@huawei.com
CVE-Watchlists
Login
Unerledigt
Login

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable the boot wizard. As a result, the FRP function is bypassed.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Mate 10 Pro Firmware Version < bla-l29_8.0.0.148\(c432\)

Huawei ≫ Mate 10 Pro Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.045

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.6	0.9	3.6	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:C/A:N

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180827-01-frpbypass-en

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-7936

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-7936

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-7936

EUVD