7.2
CVE-2018-7940
- EPSS 0.02%
- Veröffentlicht 10.05.2018 14:29:00
- Zuletzt bearbeitet 21.11.2024 04:12:59
- Quelle psirt@huawei.com
- Teams Watchlist Login
- Unerledigt Login
Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Mate 9 Firmware Version < 8.0.0.129\(sp2c00\)
Huawei ≫ Mate 9 Pro Firmware Version < 8.0.0.129\(sp2c01\)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.031 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.2 | 0.3 | 5.9 |
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.