CVE-2018-7923

2018-09-1215:00:00

huawei

www.cve.org

EPSS

0.001

Percentile

31.4%

JSON

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.

CNA Affected

[
  {
    "product": "ALP-L09",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than ALP-L09 8.0.0.150(C432)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20180911-01-smartphone-en

EPSS

0.001

Percentile

31.4%

JSON

Related for CVELIST:CVE-2018-7923