CVE-2018-7928
Medium
Description
There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1.2.303 installed on some Huawei smart phones. When re-configuring the mobile phone using the FRP function, an attacker can replace the old account with a new one through special steps by exploit this vulnerability. As a result, the FRP function is bypassed.
SeverityMedium
CVSS4.6
Exploit probability—
ProductWesterndigital My Cloud
PublishedOct 9, 2018
First seenOct 9, 2018
How to fix
Update
- westerndigital my_cloud8.1.2.303 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| westerndigital my_cloud | v < 8.1.2.303 | 8.1.2.303 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.