CVE-2018-7939
Description
Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before CAM-L21C10B145, the versions before CAM-L21C185B156, the versions before CAM-L21C223B133, the versions before CAM-L21C432B210, the versions before CAM-L21C464B170, the versions before CAM-L21C636B245, the versions before Berlin-L21C10B372, the versions before Berlin-L21C185B363, the versions before Berlin-L21C464B137, the versions before Berlin-L23C605B161, the versions before FRD-L09C10B387, the versions before FRD-L09C185B387, the versions before FRD-L09C432B398, the versions before FRD-L09C636B387, the versions before FRD-L19C10B387, the versions before FRD-L19C432B399, the versions before FRD-L19C636B387 have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can disable the boot wizard by enable the talkback function. As a result, the FRP function is bypassed.
How to fix
- huawei honor_5a_firmwarecam-l03c605b143custc605d008, cam-l21c10b145, cam-l21c185b156, cam-l21c223b133, cam-l21c432b210, cam-l21c636b245 or later
- huawei g9_lite_firmwarevns-l53c605b120custc605d103 or later
- huawei honor_5acam-l21c464b170 or later
- huawei honor_6x_firmwareberlin-l21c10b372, berlin-l21c185b363, berlin-l21c464b137, berlin-l23c605b161 or later
- huawei honor_8_firmwarefrd-l09c10b387, frd-l09c185b387, frd-l09c432b398, frd-l09c636b387, frd-l19c10b387, frd-l19c432b399, frd-l19c636b387 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei honor_5a_firmware | v < cam-l03c605b143custc605d008, v < cam-l21c10b145, v < cam-l21c185b156, v < cam-l21c223b133, v < cam-l21c432b210, v < cam-l21c636b245 | cam-l03c605b143custc605d008, cam-l21c10b145, cam-l21c185b156, cam-l21c223b133, cam-l21c432b210, cam-l21c636b245 |
| huawei g9_lite_firmware | v < vns-l53c605b120custc605d103 | vns-l53c605b120custc605d103 |
| huawei honor_5a | v < cam-l21c464b170 | cam-l21c464b170 |
| huawei honor_6x_firmware | v < berlin-l21c10b372, v < berlin-l21c185b363, v < berlin-l21c464b137, v < berlin-l23c605b161 | berlin-l21c10b372, berlin-l21c185b363, berlin-l21c464b137, berlin-l23c605b161 |
| huawei honor_8_firmware | v < frd-l09c10b387, v < frd-l09c185b387, v < frd-l09c432b398, v < frd-l09c636b387, v < frd-l19c10b387, v < frd-l19c432b399, v < frd-l19c636b387 | frd-l09c10b387, frd-l09c185b387, frd-l09c432b398, frd-l09c636b387, frd-l19c10b387, frd-l19c432b399, frd-l19c636b387 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.