Improper Authorization Vulnerability in Huawei Watch 2
CVE-2018-7926

4.6MEDIUM

Key Information:

Vendor

McAfee
Status
Huawei Watch 2
Vendor
CVE Published:
13 November 2018

What is CVE-2018-7926?

A vulnerability exists in the Huawei Watch 2 where improper permission settings allow an attacker with access to the Huawei ID linked to the device to bypass authorization checks. This exploitation can lead to unauthorized modifications of data and execution of specific commands on the watch, posing a significant risk to users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Huawei Watch 2 Versions and earlier than OWDD.180707.001.E1

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.