CVE-2018-7936
Last modified
CVE-2018-7936 is a vulnerability of currently unknown severity. Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable the boot wizard. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable the boot wizard. As a result, the FRP function is bypassed.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mate 10 Pro Firmware | < bla-l29_8.0.0.148\(c432\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-7936?
How severe is CVE-2018-7936?
How do I fix CVE-2018-7936?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-7930The Near Field Communication (NFC) module in Mate 9 Huawei m…
- CVE-2018-7931Huawei AppGallery versions before 8.0.4.301 has a whitelist …
- CVE-2018-7932Huawei AppGallery versions before 8.0.4.301 has an arbitrary…
- CVE-2018-7933Huawei home gateway products HiRouter-CD20 and WS5200 with t…
- CVE-2018-7934Some Huawei mobile phone with the versions before BLA-L29 8.…
- CVE-2018-7935 There is a vulnerability in 21.328.01.00.00 version of the …5.3
- CVE-2018-7937In Huawei HiRouter-CD20-10 with the versions before 1.9.6 an…
- CVE-2018-7938P10 Huawei smartphones with the versions before Victoria-AL0…
- CVE-2018-7939Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 wit…
- CVE-2018-7940Huawei smart phones Mate 10 and Mate 10 Pro with earlier ver…
- CVE-2018-7941Huawei iBMC V200R002C60 have an authentication bypass vulner…
- CVE-2018-7942The iBMC (Intelligent Baseboard Management Controller) of so…
Are you affected by CVE-2018-7936?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
