← Back

CVE-2018-7940

nvd nist
Published: May 10, 2018Modified: Jun 17, 2026

JSON object

Loading...
6.2
Vector
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.3 / Impact: 5.9
Source: NVD

Description

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations.

Affected (2)

Huawei
2 products
Mate 9 Firmware
Mate 9 Pro Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mate 9 Firmware
Before 8.0.0.129\(sp2c00\)
Running on/withPlatform Versions
Huawei
Mate 9
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mate 9 Pro Firmware
Before 8.0.0.129\(sp2c01\)
Running on/withPlatform Versions
Huawei
Mate 9 Pro
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.