CVE-2018-7940

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations.

Metrics

CVSS 3.0 6.2/10CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
Huawei Technologies Co., Ltd.	HUAWEI Mate 10, HUAWEI Mate 10 Pro	earlier versions than 8.0.0.129(SP2C00), earlier versions than 8.0.0.129(SP2C01)

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180509-01-mobile-enVendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180509-01-mobile-enVendor Advisory

Timeline

Published: May 10, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-79418.8Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upl CVE-2018-79427.5The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticate CVE-2018-79438.8There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication b CVE-2018-79446.8Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerabi CVE-2018-79464.3There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and CVE-2018-79473.9Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could CVE-2018-79498.8The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability. A remote attacker m CVE-2018-79508.8The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input CVE-2018-79518.8The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input CVE-2018-79565.3Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions CVE-2018-79573.3Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not veri CVE-2018-79587.4There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-i