Authentication Bypass Vulnerability in Huawei Mate 10 and Mate 10 Pro
CVE-2018-7940

6.2MEDIUM

Key Information:

Vendor

McAfee
Status
Huawei Mate 10, Huawei Mate 10 Pro
Vendor
CVE Published:
10 May 2018

What is CVE-2018-7940?

Huawei smartphones, specifically the Mate 10 and Mate 10 Pro, are susceptible to an authentication bypass vulnerability. This issue affects devices running versions earlier than 8.0.0.129 for both the Mate 10 and Mate 10 Pro models. The vulnerability allows an attacker with elevated privileges to circumvent the device's activation function through specific operations. This could potentially lead to unauthorized access and control over the affected smartphones.

Affected Version(s)

HUAWEI Mate 10, HUAWEI Mate 10 Pro earlier versions than 8.0.0.129(SP2C00), earlier versions than 8.0.0.129(SP2C01)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.