rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-7901 
RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with RCS for the first time, it needs user to manually click to agree. In addition, the attacker needs to obtain the key that RCS uses to authenticate the application. Successful exploitation may cause the attacker to control keyboard remotely.
Problem types: description: remote control
Affected products: vendor: Huawei Technologies Co., Ltd.
product: ALP-AL00B, BLA-AL00B
Published: 2018-04-30T14:00:00.000Z
CVE-2018-7902 
Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system.
Problem types: description: JSON injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: 1288H V5; 2288H V5
Published: 2018-05-24T14:00:00.000Z
CVE-2018-7903 
Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system.
Problem types: description: JSON injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: 1288H V5; 2288H V5
Published: 2018-05-24T14:00:00.000Z
CVE-2018-7904 
Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system.
Problem types: description: JSON injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: 1288H V5; 2288H V5
Published: 2018-05-24T14:00:00.000Z
CVE-2018-7906 
Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until restarting the phone.
Problem types: description: denial of service
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Leland-AL00, Leland-AL00A
Published: 2018-09-12T15:00:00.000Z
CVE-2018-7907 
Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak.
Problem types: description: sensitive information leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Agassi-L09,Agassi-W09,Baggio2-U01A,Bond-AL00C,Bond-AL10B,Bond-TL10B,Bond-TL10C,Haydn-L1JB,Kobe-L09A,Kobe-L09AHN,Kobe-W09C,LelandP-L22C,LelandP-L22D,Rhone-AL00,Selina-L02,Stanford-L09S,Toronto-AL00,Toronto-AL00A,Toronto-TL10
Published: 2018-09-26T13:00:00.000Z
CVE-2018-7910 
Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C432), BLA-L29C 8.0.0.129(C432), 8.0.0.137(C432) have an authentication bypass vulnerability. When the attacker obtains the user's smartphone, the vulnerability can be used to replace the start-up program so that the attacker can obtain the information in the smartphone and achieve the purpose of controlling the smartphone.
Problem types: description: authentication bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C
Published: 2018-11-13T19:00:00.000Z
CVE-2018-7911 
Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Problem types: description: FRP bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: ALP-AL00B, ALP-AL00B-RSC, BLA-TL00B, Charlotte-AL00A, Emily-AL00A,
Published: 2018-10-23T14:00:00.000Z
CVE-2018-7920 
Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200R006C10SPC300 devices have an improper resource management vulnerability. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the management interface of the affected device to exploit this vulnerability. Successful exploit could exhaust the socket resource of management interface, leading to a DoS condition.
Problem types: description: improper resource management
Affected products: vendor: Huawei Technologies Co., Ltd.
product: AR1200, AR160, AR200, AR2200, AR3200
Published: 2018-04-19T14:00:00.000Z
CVE-2018-7921 
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjacent attackers may exploit this vulnerability to obtain device information.
Problem types: description: information leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: B315s-22
Published: 2018-09-12T15:00:00.000Z
CVE-2018-7922 
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.
Problem types: description: insufficient input validation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: ALP-L09
Published: 2018-09-12T15:00:00.000Z
CVE-2018-7923 
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.
Problem types: description: insufficient input validation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: ALP-L09
Published: 2018-09-12T15:00:00.000Z
CVE-2018-7924 
Anne-AL00 Huawei phones with versions earlier than 8.0.0.151(C00) have an information leak vulnerability. Due to improper permission settings for specific commands, attackers who can connect to a mobile phone via the USB interface may exploit this vulnerability to obtain specific device information of the mobile phone.
Problem types: description: information leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Anne-AL00
Published: 2018-10-17T15:00:00.000Z
CVE-2018-7925 
The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability.
Problem types: description: lock-screen bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Emily-AL00A
Published: 2018-11-13T19:00:00.000Z
CVE-2018-7926 
Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to improper permission configuration for specific operations, an attacker who obtained the Huawei ID bound to the watch can bypass permission verification to perform specific operations and modify some data on the watch.
Problem types: description: improper authorization
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Huawei Watch 2
Published: 2018-11-13T19:00:00.000Z
CVE-2018-7928 
There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1.2.303 installed on some Huawei smart phones. When re-configuring the mobile phone using the FRP function, an attacker can replace the old account with a new one through special steps by exploit this vulnerability. As a result, the FRP function is bypassed.
Problem types: description: FRP bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: MyCloud
Published: 2018-10-09T14:00:00.000Z
CVE-2018-7929 
Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167(C786) have a lock-screen bypass vulnerability. An attacker could unlock and use the phone through certain operations.
Problem types: description: lock-screen bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate RS
Published: 2018-09-18T13:00:00.000Z
CVE-2018-7930 
The Near Field Communication (NFC) module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366(C567) has an information leak vulnerability due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the NFC function, the attacker can obtain arbitrary files from the mobile phone, causing information leaks.
Problem types: description: information leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 9
Published: 2018-04-11T17:00:00.000Z
CVE-2018-7931 
Huawei AppGallery versions before 8.0.4.301 has a whitelist mechanism bypass vulnerability. An attacker may set up a malicious network environment and trick user into accessing a malicious web page to bypass the whitelist mechanism.
Problem types: description: whitelist mechanism bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: AppGallery
Published: 2018-04-24T15:00:00.000Z
CVE-2018-7932 
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running vulnerability. An attacker may set up a malicious network environment and trick user into accessing a malicious web page to bypass the whitelist mechanism, which make the malicious Javascript loaded and run in the smart phone.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-24T15:00:00.000Z
CVE-2018-7933 
Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traversal vulnerability. Due to the lack of validation while these home gateway products install APK plugins, an attacker tricks a user into installing a malicious APK plugin, and plugin can overwrite arbitrary file of devices. Successful exploit may result in arbitrary code execution or privilege escalation.
Problem types: description: path traversal
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HiRouter-CD20, WS5200
Published: 2018-05-10T14:00:00.000Z
CVE-2018-7934 
Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users make specific screen gestures.
Problem types: description: DoS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 10 Pro
Published: 2018-07-31T14:00:00.000Z
CVE-2018-7935 

There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerability to make the network where the E5573Cs-322 is running temporarily unavailable.


Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Huawei
product:  E5573Cs-322
default_status: unaffected
Published: 2023-02-10T11:55:08.486Z
CVE-2018-7936 
Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable the boot wizard. As a result, the FRP function is bypassed.
Problem types: description: FRP bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 10 Pro
Published: 2018-09-04T16:00:00.000Z
CVE-2018-7937 
In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into installing it. Successful exploit could allow the attacker to obtain the root permission of the device and take full control over the device.
Problem types: description: plug-in signature bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HiRouter-CD20, WS5200-10
Published: 2018-09-04T16:00:00.000Z
CVE-2018-7938 
P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number, which may cause sensitive information leak.
Problem types: description: information leak
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P10
Published: 2018-09-04T16:00:00.000Z
CVE-2018-7939 
Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before CAM-L21C10B145, the versions before CAM-L21C185B156, the versions before CAM-L21C223B133, the versions before CAM-L21C432B210, the versions before CAM-L21C464B170, the versions before CAM-L21C636B245, the versions before Berlin-L21C10B372, the versions before Berlin-L21C185B363, the versions before Berlin-L21C464B137, the versions before Berlin-L23C605B161, the versions before FRD-L09C10B387, the versions before FRD-L09C185B387, the versions before FRD-L09C432B398, the versions before FRD-L09C636B387, the versions before FRD-L19C10B387, the versions before FRD-L19C432B399, the versions before FRD-L19C636B387 have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can disable the boot wizard by enable the talkback function. As a result, the FRP function is bypassed.
Problem types: description: FRP bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: G9 Lite, Honor 5A, Honor 6X, Honor 8
Published: 2018-09-12T15:00:00.000Z
CVE-2018-7940 
Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations.
Problem types: description: authentication bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HUAWEI Mate 10, HUAWEI Mate 10 Pro
Published: 2018-05-10T14:00:00.000Z
CVE-2018-7941 
Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation.
Problem types: description: authentication bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: iBMC
Published: 2018-05-10T14:00:00.000Z
CVE-2018-7942 
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
Problem types: description: authentication bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: 1288H V5; 2288H V5; 2488 V5; CH121 V3; CH121L V3; CH121L V5; CH121 V5; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
Published: 2018-05-24T14:00:00.000Z
CVE-2018-7943 
There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
Problem types: description: authentication bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
Published: 2018-06-05T15:00:00.000Z
CVE-2018-7944 
Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerability. An attacker gets some user's smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP function and use the phone normally.
Problem types: description: Factory Reset Protection (FRP) bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Emily-AL00A
Published: 2018-07-05T18:00:00.000Z
CVE-2018-7946 
There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due to improper design, successful exploit may cause some information leak.
Problem types: description: information leakage
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Huawei Honor 7A, Huawei Honor 9 Lite
Published: 2018-11-27T22:00:00.000Z
CVE-2018-7947 
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones.
Problem types: description: authentication bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Emily-AL00A
Published: 2018-07-31T14:00:00.000Z
CVE-2018-7949 
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users to get or modify passwords of highly privileged users.
Problem types: description: privilege escalation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
Published: 2018-06-01T14:00:00.000Z
CVE-2018-7950 
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system.
Problem types: description: JSON injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
Published: 2018-06-01T14:00:00.000Z
CVE-2018-7951 
The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers to obtain the management privilege of the system.
Problem types: description: JSON injection
Affected products: vendor: Huawei Technologies Co., Ltd.
product: 1288H V5; 2288H V5; 2488 V5 ; CH121 V3; CH121L V3; CH121L V5 ; CH121 V5 ; CH140 V3; CH140L V3; CH220 V3; CH222 V3; CH242 V3; CH242 V5 ; RH1288 V3; RH2288 V3; RH2288H V3; XH310 V3; XH321 V3; XH321 V5; XH620 V3
Published: 2018-06-01T14:00:00.000Z
CVE-2018-7956 
Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.
Problem types: description: information leakage
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Huawei VIP App
Published: 2018-12-04T18:00:00.000Z
CVE-2018-7957 
Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.
Problem types: description: information leakage
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Victoria-AL00
Published: 2018-07-31T14:00:00.000Z