CVE-2018-7947
Low
Description
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones.
SeverityLow
CVSS3.9
Exploit probability—
ProductHuawei Emily-al00a Firmware
PublishedJul 31, 2018
First seenJul 31, 2018
How to fix
Update
- huawei emily-al00a_firmware8.1.0.153\(c00\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei emily-al00a_firmware | v < 8.1.0.153\(c00\) | 8.1.0.153\(c00\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.