CVE-2018-7946 — Sensitive Information Exposure in Huawei Honor 7A Firmware

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.0%
top 91.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Honor 7A FirmwareHuawei Honor 9 Lite Firmware
Timeline
PublishedNov 27
Latest updateMay 14

Description

There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due to improper design, successful exploit may cause some information leak.

CVSS vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 0.7 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/honor_7a_firmware< 8.0.0.195\(c00\)
▶NVDhuawei/honor_9_lite_firmware< 8.0.0.182\(c01\)

🔴Vulnerability Details

2
GHSA
GHSA-cw62-q4j8-r22v: There is an information leak vulnerability in some Huawei smartphones↗2022-05-14
▶
CVEList
CVE-2018-7946: There is an information leak vulnerability in some Huawei smartphones↗2018-11-27
▶
CVE-2018-7946 — Sensitive Information Exposure | cvebase