CVE-2018-7936

published 2018-09-04

CVE-2018-7936: Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When…

Priority P4 17 medium 4.6 CVSS 3.0

AV P AC L PR N UI N S U C N I H A N

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable the boot wizard. As a result, the FRP function is bypassed.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
huawei	mate_10_pro_firmware	< bla-l29_8.0.0.148\(c432\)	bla-l29_8.0.0.148\(c432\)
huawei_technologies_co_ltd	mate_10_pro	—	—

CVSS provenance

nvd v3.0 4.6 MEDIUM CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 4.9 MEDIUM AV:L/AC:L/Au:N/C:N/I:C/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.