National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

CVE-2018-7939 Detail

Current Description

Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before CAM-L21C10B145, the versions before CAM-L21C185B156, the versions before CAM-L21C223B133, the versions before CAM-L21C432B210, the versions before CAM-L21C464B170, the versions before CAM-L21C636B245, the versions before Berlin-L21C10B372, the versions before Berlin-L21C185B363, the versions before Berlin-L21C464B137, the versions before Berlin-L23C605B161, the versions before FRD-L09C10B387, the versions before FRD-L09C185B387, the versions before FRD-L09C432B398, the versions before FRD-L09C636B387, the versions before FRD-L19C10B387, the versions before FRD-L19C432B399, the versions before FRD-L19C636B387 have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can disable the boot wizard by enable the talkback function. As a result, the FRP function is bypassed.

Source:  MITRE
View Analysis Description

Impact

CVSS v3.0 Severity and Metrics:

Base Score: 4.6 MEDIUM
Vector: AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N (V3 legend)
Impact Score: 3.6
Exploitability Score: 0.9


Attack Vector (AV): Physical
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): None
Integrity (I): High
Availability (A): None

CVSS v2.0 Severity and Metrics:

Base Score: 4.9 MEDIUM
Vector: (AV:L/AC:L/Au:N/C:N/I:C/A:N) (V2 legend)
Impact Subscore: 6.9
Exploitability Subscore: 3.9


Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (AU): None
Confidentiality (C): None
Integrity (I): Complete
Availability (A): None
Additional Information:
Allows unauthorized modification

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink Resource
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180905-01-frpbypass-en Vendor Advisory

Technical Details

Vulnerability Type (View All)

  • 7PK - Security Features (CWE-254)

Known Affected Software Configurations Switch to CPE 2.2

Configuration 1 ( hide )
 cpe:2.3:o:huawei:g9_lite_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
vns-l53c605b120custc605d103
Running on/with
 cpe:2.3:h:huawei:g9_lite:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 2 ( hide )
 cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
cam-l03c605b143custc605d008
Running on/with
 cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 3 ( hide )
 cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
cam-l21c10b145
Running on/with
 cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 4 ( hide )
 cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
cam-l21c185b156
Running on/with
 cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 5 ( hide )
 cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
cam-l21c223b133
Running on/with
 cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 6 ( hide )
 cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
cam-l21c432b210
Running on/with
 cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 7 ( hide )
 cpe:2.3:o:huawei:honor_5a:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
cam-l21c464b170
Running on/with
 cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 8 ( hide )
 cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
cam-l21c636b245
Running on/with
 cpe:2.3:h:huawei:honor_5a:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 9 ( hide )
 cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
berlin-l21c10b372
Running on/with
 cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 10 ( hide )
 cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
berlin-l21c185b363
Running on/with
 cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 11 ( hide )
 cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
berlin-l21c464b137
Running on/with
 cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 12 ( hide )
 cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
berlin-l23c605b161
Running on/with
 cpe:2.3:h:huawei:honor_6x:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 13 ( hide )
 cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
frd-l09c10b387
Running on/with
 cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 14 ( hide )
 cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
frd-l09c185b387
Running on/with
 cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 15 ( hide )
 cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
frd-l09c432b398
Running on/with
 cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 16 ( hide )
 cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
frd-l09c636b387
Running on/with
 cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 17 ( hide )
 cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
frd-l19c10b387
Running on/with
 cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 18 ( hide )
 cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
frd-l19c432b399
Running on/with
 cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*
     Show Matching CPE(s)

Configuration 19 ( hide )
 cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*
     Show Matching CPE(s)
Up to (excluding)
frd-l19c636b387
Running on/with
 cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*
     Show Matching CPE(s)


Change History

1 change record found - show changes

Quick Info

CVE Dictionary Entry:
CVE-2018-7939
NVD Published Date:
09/12/2018
NVD Last Modified:
11/30/2018