CVE-2018-7991: Medium severity huawei mate 10 firmware vulnerability
Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have a Factory Reset Protection (FRP) bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific operations. Successful exploit could allow the attacker bypass the FRP protection to access the system setting page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7991?
CVE-2018-7991 has a medium severity rating due to its enabling of unauthorized access and data manipulation.
How do I fix CVE-2018-7991?
To fix CVE-2018-7991, update the Huawei Mate10 to the firmware version ALP-AL00B 8.0.0.110(C00) or later.
What does CVE-2018-7991 vulnerability involve?
CVE-2018-7991 involves a Factory Reset Protection bypass vulnerability due to insufficient permission verification.
Which devices are affected by CVE-2018-7991?
CVE-2018-7991 affects Huawei Mate10 smartphones with firmware versions earlier than ALP-AL00B 8.0.0.110(C00).
Can CVE-2018-7991 be exploited remotely?
CVE-2018-7991 requires physical access to the device, and therefore cannot be exploited remotely.