CVE-2018-7910

Description

Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C432), BLA-L29C 8.0.0.129(C432), 8.0.0.137(C432) have an authentication bypass vulnerability. When the attacker obtains the user's smartphone, the vulnerability can be used to replace the start-up program so that the attacker can obtain the information in the smartphone and achieve the purpose of controlling the smartphone.

Category

6.8
CVSS
Severity: Medium
CVSS 3.0 •
CVSS 2.0 •
EPSS 0.03%
Vendor Advisory huawei.com
Affected: Huawei Technologies Co., Ltd. ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C
Published at:
Updated at:

References

Link Tags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181101-01-bypass-en vendor advisory

Frequently Asked Questions

What is the severity of CVE-2018-7910?
CVE-2018-7910 has been scored as a medium severity vulnerability.
How to fix CVE-2018-7910?
To fix CVE-2018-7910, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2018-7910 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2018-7910 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2018-7910?
CVE-2018-7910 affects Huawei Technologies Co., Ltd. ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.