CVE-2018-7907
Severity Score
5.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak.
Algunos productos Huawei Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223 y Toronto-TL10 Toronto-TL10C01B223 tienen una vulnerabilidad de filtrado de información sensible. Un atacante puede engañar a un usuario para que instale una aplicación maliciosa para explotar esta vulnerabilidad. Debido a la verificación insuficiente de las entradas, su explotación exitosa puede provocar un filtrado de información sensible.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-03-09 CVE Reserved
- 2018-09-26 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180919-02-smartphone-en | 2018-11-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Agassi-l09 Firmware Search vendor "Huawei" for product "Agassi-l09 Firmware" | ags-l09c100b257custc100d001 Search vendor "Huawei" for product "Agassi-l09 Firmware" and version "ags-l09c100b257custc100d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-l09 Search vendor "Huawei" for product "Agassi-l09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Agassi-l09 Firmware Search vendor "Huawei" for product "Agassi-l09 Firmware" | ags-l09c170b253custc170d001 Search vendor "Huawei" for product "Agassi-l09 Firmware" and version "ags-l09c170b253custc170d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-l09 Search vendor "Huawei" for product "Agassi-l09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Agassi-l09 Firmware Search vendor "Huawei" for product "Agassi-l09 Firmware" | ags-l09c199b251custc199d001 Search vendor "Huawei" for product "Agassi-l09 Firmware" and version "ags-l09c199b251custc199d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-l09 Search vendor "Huawei" for product "Agassi-l09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Agassi-l09 Firmware Search vendor "Huawei" for product "Agassi-l09 Firmware" | ags-l09c229b003custc229d001 Search vendor "Huawei" for product "Agassi-l09 Firmware" and version "ags-l09c229b003custc229d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-l09 Search vendor "Huawei" for product "Agassi-l09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Agassi-w09 Firmware Search vendor "Huawei" for product "Agassi-w09 Firmware" | ags-w09c100b257custc100d001 Search vendor "Huawei" for product "Agassi-w09 Firmware" and version "ags-w09c100b257custc100d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-w09 Search vendor "Huawei" for product "Agassi-w09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Agassi-w09 Firmware Search vendor "Huawei" for product "Agassi-w09 Firmware" | ags-w09c128b252custc128d001 Search vendor "Huawei" for product "Agassi-w09 Firmware" and version "ags-w09c128b252custc128d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-w09 Search vendor "Huawei" for product "Agassi-w09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Agassi-w09 Firmware Search vendor "Huawei" for product "Agassi-w09 Firmware" | ags-w09c170b252custc170d001 Search vendor "Huawei" for product "Agassi-w09 Firmware" and version "ags-w09c170b252custc170d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-w09 Search vendor "Huawei" for product "Agassi-w09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Agassi-w09 Firmware Search vendor "Huawei" for product "Agassi-w09 Firmware" | ags-w09c229b251custc229d001 Search vendor "Huawei" for product "Agassi-w09 Firmware" and version "ags-w09c229b251custc229d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-w09 Search vendor "Huawei" for product "Agassi-w09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Agassi-w09 Firmware Search vendor "Huawei" for product "Agassi-w09 Firmware" | ags-w09c331b003custc331d001 Search vendor "Huawei" for product "Agassi-w09 Firmware" and version "ags-w09c331b003custc331d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-w09 Search vendor "Huawei" for product "Agassi-w09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Agassi-w09 Firmware Search vendor "Huawei" for product "Agassi-w09 Firmware" | ags-w09c794b001custc794d001 Search vendor "Huawei" for product "Agassi-w09 Firmware" and version "ags-w09c794b001custc794d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Agassi-w09 Search vendor "Huawei" for product "Agassi-w09" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Baggio2-u01a Firmware Search vendor "Huawei" for product "Baggio2-u01a Firmware" | bg2-u01c100b160custc100d001 Search vendor "Huawei" for product "Baggio2-u01a Firmware" and version "bg2-u01c100b160custc100d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Baggio2-u01a Search vendor "Huawei" for product "Baggio2-u01a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Baggio2-u01a Firmware Search vendor "Huawei" for product "Baggio2-u01a Firmware" | bg2-u01c170b160custc170d001 Search vendor "Huawei" for product "Baggio2-u01a Firmware" and version "bg2-u01c170b160custc170d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Baggio2-u01a Search vendor "Huawei" for product "Baggio2-u01a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Baggio2-u01a Firmware Search vendor "Huawei" for product "Baggio2-u01a Firmware" | bg2-u01c199b162custc199d001 Search vendor "Huawei" for product "Baggio2-u01a Firmware" and version "bg2-u01c199b162custc199d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Baggio2-u01a Search vendor "Huawei" for product "Baggio2-u01a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Baggio2-u01a Firmware Search vendor "Huawei" for product "Baggio2-u01a Firmware" | bg2-u01c209b160custc209d001 Search vendor "Huawei" for product "Baggio2-u01a Firmware" and version "bg2-u01c209b160custc209d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Baggio2-u01a Search vendor "Huawei" for product "Baggio2-u01a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Baggio2-u01a Firmware Search vendor "Huawei" for product "Baggio2-u01a Firmware" | bg2-u01c333b160custc333d001 Search vendor "Huawei" for product "Baggio2-u01a Firmware" and version "bg2-u01c333b160custc333d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Baggio2-u01a Search vendor "Huawei" for product "Baggio2-u01a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bond-al00c Firmware Search vendor "Huawei" for product "Bond-al00c Firmware" | bond-al00cc00b201 Search vendor "Huawei" for product "Bond-al00c Firmware" and version "bond-al00cc00b201" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bond-al00c Search vendor "Huawei" for product "Bond-al00c" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bond-al10b Firmware Search vendor "Huawei" for product "Bond-al10b Firmware" | bond-al10bc00b201 Search vendor "Huawei" for product "Bond-al10b Firmware" and version "bond-al10bc00b201" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bond-al10b Search vendor "Huawei" for product "Bond-al10b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bond-tl10b Firmware Search vendor "Huawei" for product "Bond-tl10b Firmware" | bond-tl10bc01b201 Search vendor "Huawei" for product "Bond-tl10b Firmware" and version "bond-tl10bc01b201" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bond-tl10b Search vendor "Huawei" for product "Bond-tl10b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bond-tl10c Firmware Search vendor "Huawei" for product "Bond-tl10c Firmware" | bond-tl10cc01b131 Search vendor "Huawei" for product "Bond-tl10c Firmware" and version "bond-tl10cc01b131" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bond-tl10c Search vendor "Huawei" for product "Bond-tl10c" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Haydn-l1jb Firmware Search vendor "Huawei" for product "Haydn-l1jb Firmware" | hdn-l1jc137b068 Search vendor "Huawei" for product "Haydn-l1jb Firmware" and version "hdn-l1jc137b068" | - |
Affected
| in | Huawei Search vendor "Huawei" | Haydn-l1jb Search vendor "Huawei" for product "Haydn-l1jb" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Kobe-l09a Firmware Search vendor "Huawei" for product "Kobe-l09a Firmware" | kob-l09c100b252custc100d001 Search vendor "Huawei" for product "Kobe-l09a Firmware" and version "kob-l09c100b252custc100d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Kobe-l09a Search vendor "Huawei" for product "Kobe-l09a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Kobe-l09a Firmware Search vendor "Huawei" for product "Kobe-l09a Firmware" | kob-l09c209b002custc209d001 Search vendor "Huawei" for product "Kobe-l09a Firmware" and version "kob-l09c209b002custc209d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Kobe-l09a Search vendor "Huawei" for product "Kobe-l09a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Kobe-l09a Firmware Search vendor "Huawei" for product "Kobe-l09a Firmware" | kob-l09c362b001custc362d001 Search vendor "Huawei" for product "Kobe-l09a Firmware" and version "kob-l09c362b001custc362d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Kobe-l09a Search vendor "Huawei" for product "Kobe-l09a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Kobe-l09ahn Firmware Search vendor "Huawei" for product "Kobe-l09ahn Firmware" | kob-l09c233b226 Search vendor "Huawei" for product "Kobe-l09ahn Firmware" and version "kob-l09c233b226" | - |
Affected
| in | Huawei Search vendor "Huawei" | Kobe-l09ahn Search vendor "Huawei" for product "Kobe-l09ahn" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Kobe-w09c Firmware Search vendor "Huawei" for product "Kobe-w09c Firmware" | kob-w09c128b251custc128d001 Search vendor "Huawei" for product "Kobe-w09c Firmware" and version "kob-w09c128b251custc128d001" | - |
Affected
| in | Huawei Search vendor "Huawei" | Kobe-w09c Search vendor "Huawei" for product "Kobe-w09c" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Lelandp-l22c Firmware Search vendor "Huawei" for product "Lelandp-l22c Firmware" | 8.0.0.101_c675custc675d2 Search vendor "Huawei" for product "Lelandp-l22c Firmware" and version "8.0.0.101_c675custc675d2" | - |
Affected
| in | Huawei Search vendor "Huawei" | Lelandp-l22c Search vendor "Huawei" for product "Lelandp-l22c" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Lelandp-l22d Firmware Search vendor "Huawei" for product "Lelandp-l22d Firmware" | 8.0.0.101_c675custc675d2 Search vendor "Huawei" for product "Lelandp-l22d Firmware" and version "8.0.0.101_c675custc675d2" | - |
Affected
| in | Huawei Search vendor "Huawei" | Lelandp-l22d Search vendor "Huawei" for product "Lelandp-l22d" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Rhone-al00 Firmware Search vendor "Huawei" for product "Rhone-al00 Firmware" | rhone-al00c00b186 Search vendor "Huawei" for product "Rhone-al00 Firmware" and version "rhone-al00c00b186" | - |
Affected
| in | Huawei Search vendor "Huawei" | Rhone-al00 Search vendor "Huawei" for product "Rhone-al00" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Selina-l02 Firmware Search vendor "Huawei" for product "Selina-l02 Firmware" | selina-l02c432b153 Search vendor "Huawei" for product "Selina-l02 Firmware" and version "selina-l02c432b153" | - |
Affected
| in | Huawei Search vendor "Huawei" | Selina-l02 Search vendor "Huawei" for product "Selina-l02" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Stanford-l09s Firmware Search vendor "Huawei" for product "Stanford-l09s Firmware" | stanford-l09sc432b183 Search vendor "Huawei" for product "Stanford-l09s Firmware" and version "stanford-l09sc432b183" | - |
Affected
| in | Huawei Search vendor "Huawei" | Stanford-l09s Search vendor "Huawei" for product "Stanford-l09s" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Toronto-al00 Firmware Search vendor "Huawei" for product "Toronto-al00 Firmware" | toronto-al00c00b223 Search vendor "Huawei" for product "Toronto-al00 Firmware" and version "toronto-al00c00b223" | - |
Affected
| in | Huawei Search vendor "Huawei" | Toronto-al00 Search vendor "Huawei" for product "Toronto-al00" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Toronto-al00a Firmware Search vendor "Huawei" for product "Toronto-al00a Firmware" | toronto-al00ac00b223 Search vendor "Huawei" for product "Toronto-al00a Firmware" and version "toronto-al00ac00b223" | - |
Affected
| in | Huawei Search vendor "Huawei" | Toronto-al00a Search vendor "Huawei" for product "Toronto-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Toronto-tl10 Firmware Search vendor "Huawei" for product "Toronto-tl10 Firmware" | toronto-tl10c01b223 Search vendor "Huawei" for product "Toronto-tl10 Firmware" and version "toronto-tl10c01b223" | - |
Affected
| in | Huawei Search vendor "Huawei" | Toronto-tl10 Search vendor "Huawei" for product "Toronto-tl10" | - | - |
Safe
|