CVE-2018-7929 — Incorrect Authorization in Huawei Mate RS Firmware

CWE-863 — Incorrect Authorization3 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
0.0%
top 92.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Mate RS FirmwareHuawei Technologies CO LTD Mate RS
Timeline
PublishedSep 18
Latest updateMay 13

Description

Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167(C786) have a lock-screen bypass vulnerability. An attacker could unlock and use the phone through certain operations.

CVSS vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 0.9 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/mate_rs_firmware< neo-al00d_8.1.0.167\(c786\)
▶CVEListV5huawei_technologies_co_ltd/mate_rsThe versions before NEO-AL00D 8.1.0.167(C786)

🔴Vulnerability Details

2
GHSA
GHSA-x26f-vx5q-2cxf: Huawei Mate RS smartphones with the versions before NEO-AL00D 8↗2022-05-13
▶
CVEList
CVE-2018-7929: Huawei Mate RS smartphones with the versions before NEO-AL00D 8↗2018-09-18
▶
CVE-2018-7929 — Incorrect Authorization in Huawei | cvebase