Search

Find a vulnerability

Search criteria

    1 vulnerability found for alp-al00b-rsc by huawei

    VAR-201810-1162

    Vulnerability from variot - Updated: 2024-11-23 22:00

    Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed. plural Huawei Smartphones have vulnerabilities related to security functions.Information may be tampered with. Huawei ALP-AL00B is a smartphone product of China Huawei. The following products and versions are affected: Huawei ALP-AL00B Version 8.0.0.106(C00), Version 8.0.0.113(SP2C00), Version 8.0.0.113(SP3C00), Version 8.0.0.113(SP7C00), Version 8.0.0.118(C00) , 8.0.0.120 (SP2C00) version, 8.0.0.125 (SP1C00) version, 8.0.0.125 (SP3C00) version, 8.0.0.126 (SP2C00) version, 8.0.0.126 (SP5C00) version, 8.0.0.127 (SP1C00) version, 8.0 .0.128(SP2C00) version; ALP-AL00B-RSC 1.0.0.2 version; BLA-TL00B 8.0.0.113(SP7C01) version, 8.0.0.118(C01) version, 8.0.0.120(SP2C01) version, 8.0.0.125(SP1C01) version Version, 8.0.0.125(SP2C01) version, 8.0.0.125(SP3C01) version, 8.0.0.126(SP2C01) version, 8.0.0.126(SP5C01) version, 8.0.0.127(SP1C01) version, 8.0.0.128(SP2C01) version, 8.0.0.129 (SP2C01) version; Charlotte-AL00A 8.1.0.105 (SP7C00) version, 8.1.0.106 (SP3C00) version, 8.1.0.107 (SP5C00) version, 8.1.0.107 (SP7C00) version, 8.1.0.108 (SP3C00) version , 8.1.0.108 (SP6C00) version, 8.1.0.109 (SP2C00) version; Emily-AL00A 8.1.0.105 (SP6C00) version, 8.1.0.106 (SP2C00) version, 8.1.0.107 (SP5C00) version, 8.1.0.107 (SP7C00) Version, 8.1.0

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-201810-1162",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "alp-al00b 8.0.0.113",
            "scope": null,
            "trust": 1.8,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "bla-tl00b 8.0.0.125",
            "scope": null,
            "trust": 1.8,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b-rsc",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "1.0.0.2"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.113\\(sp7c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.126\\(sp2c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.125\\(sp3c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.118\\(c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.126\\(sp5c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.106\\(c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.125\\(sp1c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.113\\(sp2c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.113\\(sp3c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": "8.0.0.120\\(sp2c00\\)"
          },
          {
            "model": "emily-al00a 8.1.0.107",
            "scope": null,
            "trust": 1.2,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b 8.0.0.125",
            "scope": null,
            "trust": 1.2,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b 8.0.0.126",
            "scope": null,
            "trust": 1.2,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "bla-tl00b 8.0.0.126",
            "scope": null,
            "trust": 1.2,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "charlotte-al00a 8.1.0.107",
            "scope": null,
            "trust": 1.2,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "charlotte-al00a 8.1.0.108",
            "scope": null,
            "trust": 1.2,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "emily-al00a 8.1.0.108",
            "scope": null,
            "trust": 1.2,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "emily-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.107\\(sp5c00\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.113\\(sp7c01\\)"
          },
          {
            "model": "charlotte-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.108\\(sp3c00\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.126\\(sp5c01\\)"
          },
          {
            "model": "charlotte-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.105\\(sp7c00\\)"
          },
          {
            "model": "emily-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.108\\(sp2c00\\)"
          },
          {
            "model": "emily-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.108\\(sp6c00\\)"
          },
          {
            "model": "charlotte-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.107\\(sp7c00\\)"
          },
          {
            "model": "charlotte-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.107\\(sp5c00\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.125\\(sp3c01\\)"
          },
          {
            "model": "charlotte-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.109\\(sp2c00\\)"
          },
          {
            "model": "emily-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.105\\(sp6c00\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.120\\(sp2c01\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.129\\(sp2c01\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.125\\(sp2c01\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.128\\(sp2c01\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.128\\(sp2c00\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.125\\(sp1c01\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.118\\(c01\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.126\\(sp2c01\\)"
          },
          {
            "model": "charlotte-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.108\\(sp6c00\\)"
          },
          {
            "model": "bla-tl00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.127\\(sp1c01\\)"
          },
          {
            "model": "emily-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.107\\(sp7c00\\)"
          },
          {
            "model": "charlotte-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.106\\(sp3c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.0.0.127\\(sp1c00\\)"
          },
          {
            "model": "emily-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.106\\(sp2c00\\)"
          },
          {
            "model": "emily-al00a",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "8.1.0.109\\(sp5c00\\)"
          },
          {
            "model": "alp-al00b",
            "scope": null,
            "trust": 0.8,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b-rsc",
            "scope": null,
            "trust": 0.8,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "bla-tl00b",
            "scope": null,
            "trust": 0.8,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "charlotte al00a",
            "scope": null,
            "trust": 0.8,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "emily-al00a",
            "scope": null,
            "trust": 0.8,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "emily-al00a 8.1.0.106",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b 8.0.0.106",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b 8.0.0.118d",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b 8.0.0.118",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b 8.0.0.120",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b 8.0.0.127",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "alp-al00b 8.0.0.128",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "bla-tl00b 8.0.0.113",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "bla-tl00b 8.0.0.118",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "bla-tl00b 8.0.0.120",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "bla-tl00b 8.0.0.127",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "bla-tl00b 8.0.0.128",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "bla-tl00b 8.0.0.129",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "charlotte-al00a 8.1.0.105",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "charlotte-al00a 8.1.0.106",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "charlotte-al00a 8.1.0.109",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "emily-al00a 8.1.0.105",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "emily-al00a 8.1.0.109",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          },
          {
            "db": "NVD",
            "id": "CVE-2018-7911"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/o:huawei:alp-al00b_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:huawei:alp-al00b-rsc_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:huawei:bla-tl00b_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:huawei:charlotte-al00a_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:huawei:emily-al00a_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          }
        ]
      },
      "cve": "CVE-2018-7911",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "NONE",
                "baseScore": 4.9,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 3.9,
                "id": "CVE-2018-7911",
                "impactScore": 6.9,
                "integrityImpact": "COMPLETE",
                "severity": "MEDIUM",
                "trust": 1.8,
                "vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:N",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "NONE",
                "baseScore": 4.9,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 3.9,
                "id": "CNVD-2019-41255",
                "impactScore": 6.9,
                "integrityImpact": "COMPLETE",
                "severity": "MEDIUM",
                "trust": 0.6,
                "vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:N",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "VULHUB",
                "availabilityImpact": "NONE",
                "baseScore": 4.9,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 3.9,
                "id": "VHN-137943",
                "impactScore": 6.9,
                "integrityImpact": "COMPLETE",
                "severity": "MEDIUM",
                "trust": 0.1,
                "vectorString": "AV:L/AC:L/AU:N/C:N/I:C/A:N",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "PHYSICAL",
                "author": "nvd@nist.gov",
                "availabilityImpact": "NONE",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 0.9,
                "id": "CVE-2018-7911",
                "impactScore": 3.6,
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.8,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2018-7911",
                "trust": 1.0,
                "value": "MEDIUM"
              },
              {
                "author": "NVD",
                "id": "CVE-2018-7911",
                "trust": 0.8,
                "value": "Medium"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2019-41255",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-201810-1175",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "VULHUB",
                "id": "VHN-137943",
                "trust": 0.1,
                "value": "MEDIUM"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "db": "VULHUB",
            "id": "VHN-137943"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          },
          {
            "db": "NVD",
            "id": "CVE-2018-7911"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed. plural Huawei Smartphones have vulnerabilities related to security functions.Information may be tampered with. Huawei ALP-AL00B is a smartphone product of China Huawei. The following products and versions are affected: Huawei ALP-AL00B Version 8.0.0.106(C00), Version 8.0.0.113(SP2C00), Version 8.0.0.113(SP3C00), Version 8.0.0.113(SP7C00), Version 8.0.0.118(C00) , 8.0.0.120 (SP2C00) version, 8.0.0.125 (SP1C00) version, 8.0.0.125 (SP3C00) version, 8.0.0.126 (SP2C00) version, 8.0.0.126 (SP5C00) version, 8.0.0.127 (SP1C00) version, 8.0 .0.128(SP2C00) version; ALP-AL00B-RSC 1.0.0.2 version; BLA-TL00B 8.0.0.113(SP7C01) version, 8.0.0.118(C01) version, 8.0.0.120(SP2C01) version, 8.0.0.125(SP1C01) version Version, 8.0.0.125(SP2C01) version, 8.0.0.125(SP3C01) version, 8.0.0.126(SP2C01) version, 8.0.0.126(SP5C01) version, 8.0.0.127(SP1C01) version, 8.0.0.128(SP2C01) version, 8.0.0.129 (SP2C01) version; Charlotte-AL00A 8.1.0.105 (SP7C00) version, 8.1.0.106 (SP3C00) version, 8.1.0.107 (SP5C00) version, 8.1.0.107 (SP7C00) version, 8.1.0.108 (SP3C00) version , 8.1.0.108 (SP6C00) version, 8.1.0.109 (SP2C00) version; Emily-AL00A 8.1.0.105 (SP6C00) version, 8.1.0.106 (SP2C00) version, 8.1.0.107 (SP5C00) version, 8.1.0.107 (SP7C00) Version, 8.1.0",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2018-7911"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "db": "VULHUB",
            "id": "VHN-137943"
          }
        ],
        "trust": 2.25
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2018-7911",
            "trust": 3.1
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813",
            "trust": 0.8
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201810-1175",
            "trust": 0.7
          },
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255",
            "trust": 0.6
          },
          {
            "db": "VULHUB",
            "id": "VHN-137943",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "db": "VULHUB",
            "id": "VHN-137943"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          },
          {
            "db": "NVD",
            "id": "CVE-2018-7911"
          }
        ]
      },
      "id": "VAR-201810-1162",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "db": "VULHUB",
            "id": "VHN-137943"
          }
        ],
        "trust": 1.32919975
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          }
        ]
      },
      "last_update_date": "2024-11-23T22:00:12.504000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "huawei-sa-20180822-01-frpbypass",
            "trust": 0.8,
            "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180822-01-frpbypass-en"
          },
          {
            "title": "Patch for A variety of Huawei products FRP bypass vulnerability",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/190763"
          },
          {
            "title": "Multiple Huawei Product security vulnerabilities",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=86273"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "NVD-CWE-noinfo",
            "trust": 1.0
          },
          {
            "problemtype": "CWE-254",
            "trust": 0.9
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-137943"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "db": "NVD",
            "id": "CVE-2018-7911"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.3,
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180822-01-frpbypass-en"
          },
          {
            "trust": 0.8,
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7911"
          },
          {
            "trust": 0.8,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2018-7911"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "db": "VULHUB",
            "id": "VHN-137943"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          },
          {
            "db": "NVD",
            "id": "CVE-2018-7911"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "db": "VULHUB",
            "id": "VHN-137943"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          },
          {
            "db": "NVD",
            "id": "CVE-2018-7911"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2019-11-19T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "date": "2018-10-23T00:00:00",
            "db": "VULHUB",
            "id": "VHN-137943"
          },
          {
            "date": "2019-01-23T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "date": "2018-10-24T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          },
          {
            "date": "2018-10-23T14:29:04.437000",
            "db": "NVD",
            "id": "CVE-2018-7911"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2019-11-19T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2019-41255"
          },
          {
            "date": "2019-10-03T00:00:00",
            "db": "VULHUB",
            "id": "VHN-137943"
          },
          {
            "date": "2019-01-23T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          },
          {
            "date": "2019-10-23T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          },
          {
            "date": "2024-11-21T04:12:57.430000",
            "db": "NVD",
            "id": "CVE-2018-7911"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "local",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "plural  Huawei Vulnerabilities related to security functions in smartphones",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2018-011813"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "lack of information",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201810-1175"
          }
        ],
        "trust": 0.6
      }
    }