CVE-2018-7991
Last modified
CVE-2018-7991 is a vulnerability of currently unknown severity. Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have a Factory Reset Protection (FRP) bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific operations. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have a Factory Reset Protection (FRP) bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific operations. Successful exploit could allow the attacker bypass the FRP protection to access the system setting page.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mate10 Firmware | < alp-al00b_8.0.0.110\(c00\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-7991?
How severe is CVE-2018-7991?
How do I fix CVE-2018-7991?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-7985Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-7986Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-7987There is an out-of-bounds write vulnerability on Huawei P20 …
- CVE-2018-7988There is a Factory Reset Protection (FRP) bypass vulnerabili…
- CVE-2018-7989Huawei Mate 10 pro smartphones with the versions before BLA-…
- CVE-2018-7990Mate10 Pro Huawei smart phones with the versions before 8.1.…
- CVE-2018-7992Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D0…
- CVE-2018-7993HUAWEI Mate 10 smartphones with versions earlier than ALP-AL…
- CVE-2018-7994Some Huawei products IPS Module V500R001C50; NGFW Module V50…
- CVE-2018-7995Race condition in the store_int_with_restart() function in a…
- CVE-2018-7996Eramba e1.0.6.033 has Stored XSS on the tooltip box via the …
- CVE-2018-7997Eramba e1.0.6.033 has Reflected XSS on the Error page of the…
Are you affected by CVE-2018-7991?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST