4.3
CVE-2018-7946
- EPSS 0.03%
- Veröffentlicht 27.11.2018 22:29:00
- Zuletzt bearbeitet 21.11.2024 04:13:00
- Quelle psirt@huawei.com
- Teams Watchlist Login
- Unerledigt Login
There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due to improper design, successful exploit may cause some information leak.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Honor 7a Firmware Version < 8.0.0.195\(c00\)
Huawei ≫ Honor 9 Lite Firmware Version < 8.0.0.182\(c01\)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.05 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 0.7 | 3.6 |
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 1.9 | 3.4 | 2.9 |
AV:L/AC:M/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.