ByteOS Network

NVD Vulnerability Details :

CVE-2018-7925

Analyzed

Source-psirt@huawei.com

Published At-13 Nov, 2018 | 19:29

Updated At-03 Oct, 2019 | 00:03

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.8	MEDIUM	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Huawei Technologies Co., Ltd.

>>emily-al00a_firmware>>Versions before 8.1.0.171\(c00\)(exclusive)

cpe:2.3:o:huawei:emily-al00a_firmware:*:*:*:*:*:*:*:*

Huawei Technologies Co., Ltd.

>>emily-al00a>>-

cpe:2.3:h:huawei:emily-al00a:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-863	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181105-01-smartphone-en	psirt@huawei.com	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History