← Back

CVE-2018-7946

nvd nist
Published: Nov 27, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.3
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 0.7 / Impact: 3.6
Source: NVD

Description

There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due to improper design, successful exploit may cause some information leak.

Affected (2)

Huawei
2 products
Honor 7a Firmware
Honor 9 Lite Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Honor 7a Firmware
Before 8.0.0.195\(c00\)
Running on/withPlatform Versions
Huawei
Honor 7a
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Honor 9 Lite Firmware
Before 8.0.0.182\(c01\)
Running on/withPlatform Versions
Huawei
Honor 9 Lite
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.