CVE-2018-7946: Infoleak

Q: What is CVE-2018-7946?

CVE-2018-7946 is an information leak vulnerability in some Huawei smartphones.

Q: How can an attacker exploit CVE-2018-7946?

An attacker can exploit CVE-2018-7946 by tricking a user into inputting sensitive information.

Q: What is the severity of CVE-2018-7946?

The severity of CVE-2018-7946 is medium with a score of 4.3.

Q: Which Huawei smartphones are affected by CVE-2018-7946?

Huawei smartphones Honor 7a with firmware up to version 8.0.0.195 (c00) and Honor 9 Lite with firmware up to version 8.0.0.182 (c01) are affected by CVE-2018-7946.

Q: How can I fix CVE-2018-7946?

To fix CVE-2018-7946, update your Huawei smartphone's firmware to a version that is not vulnerable.

Published Nov 27, 2018

Updated

There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due to improper design, successful exploit may cause some information leak.

Affected Software

4 affected components

Huawei Honor 7a Firmware<8.0.0.195\(c00\)

Huawei Honor 7a

Huawei Honor 9 Lite Firmware<8.0.0.182\(c01\)

Huawei Honor 9 Lite

Event History

Nov 27, 2018

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-7946?

CVE-2018-7946 is an information leak vulnerability in some Huawei smartphones.

How can an attacker exploit CVE-2018-7946?

An attacker can exploit CVE-2018-7946 by tricking a user into inputting sensitive information.

What is the severity of CVE-2018-7946?

The severity of CVE-2018-7946 is medium with a score of 4.3.

Which Huawei smartphones are affected by CVE-2018-7946?

Huawei smartphones Honor 7a with firmware up to version 8.0.0.195 (c00) and Honor 9 Lite with firmware up to version 8.0.0.182 (c01) are affected by CVE-2018-7946.

How can I fix CVE-2018-7946?