ZeroHour

CVE-2018-7947

CVSS 3.0
3.9 low
EPSS
<1%p15
Published
()
Modified
Description

Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones.

Vendors
huawei
Products
emily-al00a firmware
Weakness
CWE-287
Vector
CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

In the news

No ingested article mentions this CVE yet.