CVE-2018-7939
Quick assessment
Affected
Huawei Technologies Co., Ltd. G9 Lite, Honor 5A, Honor 6X, Honor 8
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Huawei G9 Lite等都是中国华为（Huawei）公司的智能手机产品。 多款Huawei产品中存在安全漏洞。攻击者可通过在使用FRP重新设置手机过程中打开talkback功能并关闭开机向导利用该漏洞绕过FRP功能。以下产品和版本受到影响：Huawei G9 Lite VNS-L53C605B120CUSTC605D103之前的版本；Honor 5A CAM-L03C605B143CUSTC605D008之前的版本，CAM-L21C10B145之前的版本，CAM-L21C185B156之前的版本，C
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-7939
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before CAM-L21C10B145, the versions before CAM-L21C185B156, the versions before CAM-L21C223B133, the versions before CAM-L21C432B210, the versions before CAM-L21C464B170, the versions before CAM-L21C636B245, the versions before Berlin-L21C10B372, the versions before Berlin-L21C185B363, the versions before Berlin-L21C464B137, the versions before Berlin-L23C605B161, the versions before FRD-L09C10B387, the versions before FRD-L09C185B387, the versions before FRD-L09C432B398, the versions before FRD-L09C636B387, the versions before FRD-L19C10B387, the versions before FRD-L19C432B399, the versions before FRD-L19C636B387 have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can disable the boot wizard by enable the talkback function. As a result, the FRP function is bypassed.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款Huawei产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei G9 Lite等都是中国华为（Huawei）公司的智能手机产品。 多款Huawei产品中存在安全漏洞。攻击者可通过在使用FRP重新设置手机过程中打开talkback功能并关闭开机向导利用该漏洞绕过FRP功能。以下产品和版本受到影响：Huawei G9 Lite VNS-L53C605B120CUSTC605D103之前的版本；Honor 5A CAM-L03C605B143CUSTC605D008之前的版本，CAM-L21C10B145之前的版本，CAM-L21C185B156之前的版本，C
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Huawei Technologies Co., Ltd. | G9 Lite, Honor 5A, Honor 6X, Honor 8 | The versions before VNS-L53C605B120CUSTC605D103, The versions before CAM-L03C605B143CUSTC605D008, The versions before CAM-L21C10B145, The versions before CAM-L21C185B156, The versions before CAM-L21C223B133, The versions before CAM-L21C432B210, The versio | - |
|
II. Public POCs for CVE-2018-7939
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-7939
请登录查看更多情报信息。
Other References for CVE-2018-7939 (1)
Same Patch Batch · Huawei Technologies Co., Ltd. · 2018-09-12 · 5 CVEs total
| CVE-2018-7906 | Huawei Leland-AL00和Leland-AL00A 安全漏洞 | |
| CVE-2018-7921 | Huawei B315s-22 信息泄露漏洞 | |
| CVE-2018-7922 | Huawei ALP-L09 安全漏洞 | |
| CVE-2018-7923 | Huawei ALP-L09 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2018-7939
No comments yet