CVE-2018-7938

2018-09-0416:00:00

huawei

www.cve.org

3.6 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number, which may cause sensitive information leak.

CNA Affected

[
  {
    "product": "P10",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "The versions before Victoria-AL00AC00B217"
      }
    ]
  }
]