CVE-2018-7930
Medium
Description
The Near Field Communication (NFC) module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366(C567) has an information leak vulnerability due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the NFC function, the attacker can obtain arbitrary files from the mobile phone, causing information leaks.
SeverityMedium
CVSS5.7
Exploit probability—
ProductHuawei Mate 9 Firmware
PublishedApr 11, 2018
First seenApr 11, 2018
How to fix
Update
- huawei mate_9_firmwaremha-l29b_8.0.0.366\(c567\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei mate_9_firmware | v < mha-l29b_8.0.0.366\(c567\) | mha-l29b_8.0.0.366\(c567\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.