CVE-2018-7989
First published: Wed Oct 17 2018(Updated: )
Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326(C00) have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful exploit could allow the attacker to use the application which is locked.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Mate 10 Pro Firmware | <bla-al00b_8.1.0.326\(c00\) | |
| Huawei Mate 10 pro |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-7989.
What is the severity of CVE-2018-7989?
The severity of CVE-2018-7989 is medium with a severity value of 4.6.
What is the affected software?
Huawei Mate 10 pro smartphones with versions before BLA-AL00B 8.1.0.326(C00) are affected by this vulnerability.
What is App Lock?
App Lock is a function on smartphones that prevents unauthorized use of apps.
How can an attacker exploit CVE-2018-7989?
An attacker could directly change the lock password of App Lock after a series of operations.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei mate 10 pro firmware
- canonical/huawei mate 10 pro