CVE-2018-7991
Medium
Description
Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have a Factory Reset Protection (FRP) bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific operations. Successful exploit could allow the attacker bypass the FRP protection to access the system setting page.
SeverityMedium
CVSS4.6
Exploit probability—
ProductHuawei Mate10 Firmware
PublishedSep 18, 2018
First seenSep 18, 2018
How to fix
Update
- huawei mate10_firmwarealp-al00b_8.0.0.110\(c00\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei mate10_firmware | v < alp-al00b_8.0.0.110\(c00\) | alp-al00b_8.0.0.110\(c00\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.