CVE-2018-7911 : Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(

Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed.

Published 2018-10-23 14:29:04

Updated 2019-10-03 00:03:26

Source Huawei Technologies

View at NVD, CVE.org

Products affected by CVE-2018-7911

Huawei » Emily-al00a Firmware » Version: 8.1.0.108(sp6c00)
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.108\(sp6c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Emily-al00a » Version: N/A
Huawei » Emily-al00a Firmware » Version: 8.1.0.109(sp5c00)
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.109\(sp5c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Emily-al00a » Version: N/A
Huawei » Emily-al00a Firmware » Version: 8.1.0.105(sp6c00)
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.105\(sp6c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Emily-al00a » Version: N/A
Huawei » Emily-al00a Firmware » Version: 8.1.0.107(sp5c00)
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.107\(sp5c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Emily-al00a » Version: N/A
Huawei » Emily-al00a Firmware » Version: 8.1.0.108(sp2c00)
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.108\(sp2c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Emily-al00a » Version: N/A
Huawei » Emily-al00a Firmware » Version: 8.1.0.106(sp2c00)
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.106\(sp2c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Emily-al00a » Version: N/A
Huawei » Emily-al00a Firmware » Version: 8.1.0.107(sp7c00)
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.107\(sp7c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Emily-al00a » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.127(sp1c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.127\(sp1c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.128(sp2c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.128\(sp2c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.106(c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.106\(c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.113(sp3c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.113\(sp3c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.113(sp7c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.113\(sp7c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.118(c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.118\(c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.120(sp2c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.120\(sp2c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.113(sp2c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.113\(sp2c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.125(sp1c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.125\(sp1c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.126(sp2c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.126\(sp2c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.125(sp3c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.125\(sp3c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b Firmware » Version: 8.0.0.126(sp5c00)
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.126\(sp5c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b » Version: N/A
Huawei » Alp-al00b-rsc Firmware » Version: 1.0.0.2
cpe:2.3:o:huawei:alp-al00b-rsc_firmware:1.0.0.2:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Alp-al00b-rsc » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.126(sp2c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.126\(sp2c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.126(sp5c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.126\(sp5c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.127(sp1c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.127\(sp1c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.128(sp2c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.128\(sp2c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.118(c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.118\(c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.125(sp1c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.125\(sp1c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.125(sp3c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.125\(sp3c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.129(sp2c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.129\(sp2c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.120(sp2c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.120\(sp2c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.125(sp2c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.125\(sp2c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Bla-tl00b Firmware » Version: 8.0.0.113(sp7c01)
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.113\(sp7c01\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Bla-tl00b » Version: N/A
Huawei » Charlotte-al00a Firmware » Version: 8.1.0.105(sp7c00)
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.105\(sp7c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Charlotte-al00a » Version: N/A
Huawei » Charlotte-al00a Firmware » Version: 8.1.0.106(sp3c00)
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.106\(sp3c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Charlotte-al00a » Version: N/A
Huawei » Charlotte-al00a Firmware » Version: 8.1.0.107(sp5c00)
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.107\(sp5c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Charlotte-al00a » Version: N/A
Huawei » Charlotte-al00a Firmware » Version: 8.1.0.108(sp3c00)
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.108\(sp3c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Charlotte-al00a » Version: N/A
Huawei » Charlotte-al00a Firmware » Version: 8.1.0.109(sp2c00)
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.109\(sp2c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Charlotte-al00a » Version: N/A
Huawei » Charlotte-al00a Firmware » Version: 8.1.0.107(sp7c00)
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.107\(sp7c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Charlotte-al00a » Version: N/A
Huawei » Charlotte-al00a Firmware » Version: 8.1.0.108(sp6c00)
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.108\(sp6c00\):*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Charlotte-al00a » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-7911

EPSS FAQ

0.03%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 5 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-7911

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:C/A:N	3.9	6.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Complete Availability Impact: None
4.6	MEDIUM	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	0.9	3.6	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None

References for CVE-2018-7911

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180822-01-frpbypass-en

Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones
Vendor Advisory

Jump to

Vulnerability Details : CVE-2018-7911

Products affected by CVE-2018-7911

Exploit prediction scoring system (EPSS) score for CVE-2018-7911

CVSS scores for CVE-2018-7911

References for CVE-2018-7911