CVE-2018-7922
High
Description
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHuawei Alp-l09 Firmware
PublishedSep 12, 2018
First seenSep 12, 2018
How to fix
Update
- huawei alp-l09_firmware8.0.0.150\(c432\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei alp-l09_firmware | v < 8.0.0.150\(c432\) | 8.0.0.150\(c432\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.