CVE-2018-7988

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.

• CWE-863

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-smartphone-enVendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-smartphone-enVendor Advisory

Published

Nov 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7982Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7983Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7984Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7985Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7986Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7987There is an out-of-bounds write vulnerability on Huawei P20 …
• CVE-2018-7989Huawei Mate 10 pro smartphones with the versions before BLA-…
• CVE-2018-7990Mate10 Pro Huawei smart phones with the versions before 8.1.…
• CVE-2018-7991Huawei smartphones Mate10 with versions earlier before ALP-A…
• CVE-2018-7992Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D0…
• CVE-2018-7993HUAWEI Mate 10 smartphones with versions earlier than ALP-AL…
• CVE-2018-7994Some Huawei products IPS Module V500R001C50; NGFW Module V50…