CVE-2018-7988
Medium
Description
There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.
SeverityMedium
CVSS4.6
Exploit probability—
ProductHuawei Nova 2 Plus Firmware
PublishedNov 27, 2018
First seenNov 27, 2018
How to fix
Update
- huawei nova_2_plus_firmware8.0.0.350\(c00\) or later
- huawei mate_9_pro_firmware8.0.0.363\(c00\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei nova_2_plus_firmware | v < 8.0.0.350\(c00\) | 8.0.0.350\(c00\) |
| huawei mate_9_pro_firmware | v < 8.0.0.363\(c00\) | 8.0.0.363\(c00\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.