CVE-2018-7961: Infoleak

Published Nov 27, 2018

Updated

There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to access malicious Website or malicious App and register. Due to incorrect processing of the smart SMS verification code, successful exploitation can cause sensitive information leak.

Affected Software

2 affected components

Huawei Emily-al00a Firmware=8.1.0.167\(c00\)

Huawei Emily-AL00A

Event History

Nov 27, 2018

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-7961?

CVE-2018-7961 is a smart SMS verification code vulnerability in some Huawei smart phones.

How can CVE-2018-7961 be exploited?

An attacker can exploit CVE-2018-7961 by tricking a user to access a malicious website or app and register, causing sensitive information to leak.

Which Huawei smartphones are affected by CVE-2018-7961?

CVE-2018-7961 affects Huawei smart phones with the following firmware version: 8.1.0.167(c00).

Is Huawei Emily-al00a vulnerable to CVE-2018-7961?

No, Huawei Emily-al00a is not vulnerable to CVE-2018-7961.

What is the severity of CVE-2018-7961?

CVE-2018-7961 has a severity value of 6.5, which is considered medium.

How can I fix CVE-2018-7961?

To fix CVE-2018-7961, it is recommended to update the affected Huawei smart phone to a firmware version that addresses the vulnerability.