Improper Authentication in Huawei Mate 10 Pro Smartphones
CVE-2018-7989

4.6MEDIUM

Key Information:

Vendor
McAfee
Vendor
CVE Published:
17 October 2018

Summary

Huawei Mate 10 Pro smartphones are impacted by a vulnerability that allows attackers to manipulate the App Lock feature, which is designed to secure applications from unauthorized access. By executing a specific sequence of operations, an attacker could successfully alter the lock password, thereby gaining unauthorized access to application functionalities that were previously secured. This vulnerability highlights significant concerns regarding mobile application security and the integrity of user data.

Affected Version(s)

Mate 10 pro The versions before BLA-AL00B 8.1.0.326(C00)

References

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.