CVE-2018-7947: Medium severity huawei emily-al00a vulnerability
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-7947?
CVE-2018-7947 is an authentication bypass vulnerability in Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) that allows an attacker to trick the user to connect to a malicious device.
How can an attacker exploit CVE-2018-7947?
In the debug mode, the attacker can exploit CVE-2018-7947 to bypass some specific functionality and gain unauthorized access.
Which Huawei mobile phones are affected by CVE-2018-7947?
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) are affected by CVE-2018-7947.
What is the severity rating of CVE-2018-7947?
CVE-2018-7947 has a medium severity rating with a score of 3.9.
How can I fix CVE-2018-7947?
Update your Huawei mobile phone to Emily-AL00A 8.1.0.153(C00) or later to address the authentication bypass vulnerability.