CVE-2018-7956: Medium severity huawei vip app vulnerability
Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-7956?
CVE-2018-7956 is a vulnerability in the Huawei VIP App that allows attackers to conduct brute force attacks and gain access to user information.
Which software versions are affected by CVE-2018-7956?
Versions before 4.0.5 of the Huawei VIP App are affected by CVE-2018-7956.
What is the severity of CVE-2018-7956?
CVE-2018-7956 has a severity rating of 5.3 (Medium).
How can attackers exploit CVE-2018-7956?
Attackers can exploit CVE-2018-7956 by conducting brute force attacks to gain unauthorized access to the VIP App Web Services and obtain user information.
How can I protect myself from CVE-2018-7956?
To protect yourself from CVE-2018-7956, make sure you have updated to version 4.0.5 or later of the Huawei VIP App.