CVE-2018-7911
Severity Score
4.6
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Algnos smartphones Huawei ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00) y 8.1.0.109(SP5C00) tienen una vulnerabilidad de omisión de seguridad de FRP (Factory Reset Protection). Al reconfigurar el teléfono móvil mediante la función FRP, un atacante puede iniciar sesión en el flujo de configuración por Gaode Map y puede realizar algunas operaciones para actualizar la cuenta de Google. Como resultado, se omite la función FRP.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-03-09 CVE Reserved
- 2018-10-23 CVE Published
- 2024-08-05 CVE Updated
- 2024-09-01 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180822-01-frpbypass-en | 2019-10-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.106\(c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.106\(c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.113\(sp2c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.113\(sp2c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.113\(sp3c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.113\(sp3c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.113\(sp7c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.113\(sp7c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.118\(c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.118\(c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.120\(sp2c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.120\(sp2c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.125\(sp1c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.125\(sp1c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.125\(sp3c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.125\(sp3c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.126\(sp2c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.126\(sp2c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.126\(sp5c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.126\(sp5c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.127\(sp1c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.127\(sp1c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b Firmware Search vendor "Huawei" for product "Alp-al00b Firmware" | 8.0.0.128\(sp2c00\) Search vendor "Huawei" for product "Alp-al00b Firmware" and version "8.0.0.128\(sp2c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b Search vendor "Huawei" for product "Alp-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Alp-al00b-rsc Firmware Search vendor "Huawei" for product "Alp-al00b-rsc Firmware" | 1.0.0.2 Search vendor "Huawei" for product "Alp-al00b-rsc Firmware" and version "1.0.0.2" | - |
Affected
| in | Huawei Search vendor "Huawei" | Alp-al00b-rsc Search vendor "Huawei" for product "Alp-al00b-rsc" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.113\(sp7c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.113\(sp7c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.118\(c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.118\(c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.120\(sp2c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.120\(sp2c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.125\(sp1c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.125\(sp1c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.125\(sp2c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.125\(sp2c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.125\(sp3c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.125\(sp3c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.126\(sp2c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.126\(sp2c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.126\(sp5c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.126\(sp5c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.127\(sp1c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.127\(sp1c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.128\(sp2c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.128\(sp2c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Bla-tl00b Firmware Search vendor "Huawei" for product "Bla-tl00b Firmware" | 8.0.0.129\(sp2c01\) Search vendor "Huawei" for product "Bla-tl00b Firmware" and version "8.0.0.129\(sp2c01\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Bla-tl00b Search vendor "Huawei" for product "Bla-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Charlotte-al00a Firmware Search vendor "Huawei" for product "Charlotte-al00a Firmware" | 8.1.0.105\(sp7c00\) Search vendor "Huawei" for product "Charlotte-al00a Firmware" and version "8.1.0.105\(sp7c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Charlotte-al00a Search vendor "Huawei" for product "Charlotte-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Charlotte-al00a Firmware Search vendor "Huawei" for product "Charlotte-al00a Firmware" | 8.1.0.106\(sp3c00\) Search vendor "Huawei" for product "Charlotte-al00a Firmware" and version "8.1.0.106\(sp3c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Charlotte-al00a Search vendor "Huawei" for product "Charlotte-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Charlotte-al00a Firmware Search vendor "Huawei" for product "Charlotte-al00a Firmware" | 8.1.0.107\(sp5c00\) Search vendor "Huawei" for product "Charlotte-al00a Firmware" and version "8.1.0.107\(sp5c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Charlotte-al00a Search vendor "Huawei" for product "Charlotte-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Charlotte-al00a Firmware Search vendor "Huawei" for product "Charlotte-al00a Firmware" | 8.1.0.107\(sp7c00\) Search vendor "Huawei" for product "Charlotte-al00a Firmware" and version "8.1.0.107\(sp7c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Charlotte-al00a Search vendor "Huawei" for product "Charlotte-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Charlotte-al00a Firmware Search vendor "Huawei" for product "Charlotte-al00a Firmware" | 8.1.0.108\(sp3c00\) Search vendor "Huawei" for product "Charlotte-al00a Firmware" and version "8.1.0.108\(sp3c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Charlotte-al00a Search vendor "Huawei" for product "Charlotte-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Charlotte-al00a Firmware Search vendor "Huawei" for product "Charlotte-al00a Firmware" | 8.1.0.108\(sp6c00\) Search vendor "Huawei" for product "Charlotte-al00a Firmware" and version "8.1.0.108\(sp6c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Charlotte-al00a Search vendor "Huawei" for product "Charlotte-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Charlotte-al00a Firmware Search vendor "Huawei" for product "Charlotte-al00a Firmware" | 8.1.0.109\(sp2c00\) Search vendor "Huawei" for product "Charlotte-al00a Firmware" and version "8.1.0.109\(sp2c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Charlotte-al00a Search vendor "Huawei" for product "Charlotte-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Emily-al00a Firmware Search vendor "Huawei" for product "Emily-al00a Firmware" | 8.1.0.105\(sp6c00\) Search vendor "Huawei" for product "Emily-al00a Firmware" and version "8.1.0.105\(sp6c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Emily-al00a Search vendor "Huawei" for product "Emily-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Emily-al00a Firmware Search vendor "Huawei" for product "Emily-al00a Firmware" | 8.1.0.106\(sp2c00\) Search vendor "Huawei" for product "Emily-al00a Firmware" and version "8.1.0.106\(sp2c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Emily-al00a Search vendor "Huawei" for product "Emily-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Emily-al00a Firmware Search vendor "Huawei" for product "Emily-al00a Firmware" | 8.1.0.107\(sp5c00\) Search vendor "Huawei" for product "Emily-al00a Firmware" and version "8.1.0.107\(sp5c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Emily-al00a Search vendor "Huawei" for product "Emily-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Emily-al00a Firmware Search vendor "Huawei" for product "Emily-al00a Firmware" | 8.1.0.107\(sp7c00\) Search vendor "Huawei" for product "Emily-al00a Firmware" and version "8.1.0.107\(sp7c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Emily-al00a Search vendor "Huawei" for product "Emily-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Emily-al00a Firmware Search vendor "Huawei" for product "Emily-al00a Firmware" | 8.1.0.108\(sp2c00\) Search vendor "Huawei" for product "Emily-al00a Firmware" and version "8.1.0.108\(sp2c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Emily-al00a Search vendor "Huawei" for product "Emily-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Emily-al00a Firmware Search vendor "Huawei" for product "Emily-al00a Firmware" | 8.1.0.108\(sp6c00\) Search vendor "Huawei" for product "Emily-al00a Firmware" and version "8.1.0.108\(sp6c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Emily-al00a Search vendor "Huawei" for product "Emily-al00a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Emily-al00a Firmware Search vendor "Huawei" for product "Emily-al00a Firmware" | 8.1.0.109\(sp5c00\) Search vendor "Huawei" for product "Emily-al00a Firmware" and version "8.1.0.109\(sp5c00\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Emily-al00a Search vendor "Huawei" for product "Emily-al00a" | - | - |
Safe
|