CVE-2018-7923

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 68.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Alp-l09 FirmwareHuawei Technologies Co., Ltd. Alp-l09
Timeline
PublishedSep 12
Latest updateMay 14

Description

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/alp-l09_firmware< 8.0.0.150\(c432\)
▶CVEListV5huawei_technologies_co.,_ltd./alp-l09Versions earlier than ALP-L09 8.0.0.150(C432)

🔴Vulnerability Details

2
GHSA
GHSA-7mvq-693f-g39p: Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8↗2022-05-14
▶
CVEList
CVE-2018-7923: Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8↗2018-09-12
▶
CVE-2018-7923 (HIGH CVSS 7.8) | Huawei ALP-L09 smart phones with ve | cvebase.io