Information Leak Vulnerability in Huawei Smartphones
CVE-2018-7946

4.3MEDIUM

Key Information:

Vendor
McAfee
Status
Huawei Honor 7a, Huawei Honor 9 Lite
Vendor
CVE Published:
27 November 2018

Summary

An information leak vulnerability exists in some Huawei smartphones that can be exploited by attackers through specific configurations. This flaw may lead to unauthorized access to sensitive user data, putting personal information at risk. Attackers can trick users into revealing confidential information, which could result in severe privacy breaches. Proper security measures are essential to mitigate this risk and protect user data.

Affected Version(s)

Huawei Honor 7A, Huawei Honor 9 Lite Huawei Honorinformation leak 7A the versions before 8.0.0.195(C00), Huawei Honor 9 Lite the versions before 8.0.0.182(C01)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.