CVE-2018-7911: Medium severity huawei alp-al00b-rsc firmware vulnerability
Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7911?
CVE-2018-7911 has been assigned a high severity rating due to its potential to allow unauthorized access to sensitive information.
How do I fix CVE-2018-7911?
To remediate CVE-2018-7911, users should update their Huawei devices to the latest firmware version that addresses this vulnerability.
Which devices are affected by CVE-2018-7911?
CVE-2018-7911 affects specific Huawei devices including the ALP-AL00B and BLA-TL00B with various firmware versions listed in the CVE details.
What is the impact of CVE-2018-7911?
The impact of CVE-2018-7911 could include unauthorized access and data leakage from affected Huawei smartphones.
Is there a workaround for CVE-2018-7911?
Currently, there are no known workarounds for CVE-2018-7911, making firmware updates essential for protection.