CVE-2018-7956

CVE-2018-7956 concerns Huawei VIP App (Malaysia) with versions before 4.0.5. The vulnerability enables brute-force attempts against the VIP App Web Services to disclose user information, an information-disclosure issue with a CVSS v3 base score of 5.3 (MEDIUM). The root cause is improper protecti...

Huawei VIP Application Service Information Disclosure Vulnerability

Huawei VIP App is a mobile application service. The app mainly serves Malaysian users who have purchased P20 series, Nova3/3i and Mate 20. The Huawei VIP App service is vulnerable to information leakage. A brute force attacker could obtain some of the user's information...

CVE-2018-7989

Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326C00 have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful...

CVE-2017-17176

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156,...

CVE-2017-17176

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156,...

Buffer overflow

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156,...

CVE-2018-7989

Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326C00 have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful...

Authentication flaw

Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326C00 have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful...

CVE-2017-17176

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156,...

CVE-2018-7989

Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326C00 have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful...

CVE-2017-17176

CVE-2017-17176 affects Huawei Mate 9 and Mate 9 Pro hardware security module prior to builds MHA-AL00BC00B156, MHA-CL00BC00B156, MHA-DL00BC00B156, MHA-TL00BC00B156, LON-AL00BC00B156, LON-CL00BC00B156, LON-DL00BC00B156, LON-TL00BC00B156. Root-level Android access could trigger arbitrary memory rea...

CVE-2018-7989

The CVE-2018-7989 entry affects Huawei Mate 10 Pro devices running before BLA-AL00B 8.1.0.326(C00). It describes an improper authentication vulnerability in the App Lock feature, where an attacker could directly change the lock password after a sequence of operations, enabling access to a previou...

Arbitrary Memory Read/Write Vulnerability in Multiple Huawei Phones

The Huawei Mate 9 and Mate 9 Pro are both smartphone products from the Chinese company Huawei Huawei. An arbitrary memory read/write vulnerability exists in multiple Huawei phones. The vulnerability is due to insufficient input checksums in the hardware security module of some Huawei phones. An...

Huawei Mate 10 Pro Improper Authentication Vulnerability

Huawei Mate 10 Pro is a smartphone product from Chinese company Huawei Huawei. An improper authentication vulnerability exists in Huawei Mate 10 Pro BLA-AL00B 8.1.0.326C00, which can be exploited by an attacker to directly change the app lock password and use a locked app...

CVE-2018-7929

Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167C786 have a lock-screen bypass vulnerability. An attacker could unlock and use the phone through certain operations...

Security feature bypass

Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167C786 have a lock-screen bypass vulnerability. An attacker could unlock and use the phone through certain operations...

CVE-2018-7929

Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167C786 have a lock-screen bypass vulnerability. An attacker could unlock and use the phone through certain operations...

CVE-2018-7929

CVE-2018-7929 affects Huawei Mate RS smartphones (pre-NEO-AL00D 8.1.0.167(C786)) with a lock-screen bypass vulnerability. ThreatPost and Huawei advisory describe a design/ implementation flaw in in-display fingerprint sensing that could be exploited to unlock the device after certain operations; ...

Security Advisory - Lock-screen Bypass Vulnerability in Huawei Mate RS Smartphones

There is a lock-screen bypass vulnerability in Huawei Mate RS smartphones. An attacker could unlock and use the phone through certain operations. Vulnerability ID: HWPSIRT-2018-06108 This vulnerability has been assigned a CVE ID: CVE-2018-7929. Huawei has released software updates to fix this...

Huawei Mobile Phone Input Validation Vulnerability

Huawei Mate 10 ALP-L09 is a smartphone product of Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Mate 10 ALP-L09 phone due to a lack of parameter checking. An attacker induces a user who has gained root privileges to install a carefully crafted application,...