← Back

CVE-2018-7938

nvd nist
Published: Sep 4, 2018Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number, which may cause sensitive information leak.

Affected (1)

Products: Huawei: P10 Firmware
Huawei
1 product
P10 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
P10 Firmware
Before victoria-al00ac00b217
Running on/withPlatform Versions
Huawei
P10
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.