CVE-2018-7901: Medium severity Huawei Alp-al00b Firmware vulnerability
RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with RCS for the first time, it needs user to manually click to agree. In addition, the attacker needs to obtain the key that RCS uses to authenticate the application. Successful exploitation may cause the attacker to control keyboard remotely.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Huawei ALP-AL00B (RCS module)to a version that resolves this vulnerability.Fixed in 8.0.0.129 - Upgrade
Upgrade
Huawei BLA-AL00B (RCS module)to a version that resolves this vulnerability.Fixed in 8.0.0.129 - Configuration
Ensure that when an application connects with RCS for the first time, the user must manually click to agree; do not implement any automatic approval that would bypass this consent step.
RCS First-time connection user agreement = Require manual user click to agree (do not bypass/auto-accept) - Compensating control
To reduce the risk from remote keyboard control during active exploitation, restrict network/remote access so untrusted applications/services cannot reach the RCS functionality on affected devices.
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2018-7901.
What is the severity of CVE-2018-7901?
The severity of CVE-2018-7901 is medium with a severity value of 4.4.
Which Huawei devices are affected by CVE-2018-7901?
Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129 and BLA-AL00B smart phones with software versions earlier than 8.0.0.129 are affected by CVE-2018-7901.
How can an attacker exploit CVE-2018-7901?
An attacker can trick a user to install a malicious application that connects with RCS to exploit CVE-2018-7901.
Where can I find more information about CVE-2018-7901?
You can find more information about CVE-2018-7901 on the Huawei website: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180425-01-rcs-en