Search
Find a vulnerability
Search criteria
7 vulnerabilities found for emily-al00a by huawei
VAR-201811-0859
Vulnerability from variot - Updated: 2024-11-23 23:04There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to access malicious Website or malicious App and register. Due to incorrect processing of the smart SMS verification code, successful exploitation can cause sensitive information leak. plural Huawei Smartphones contain information disclosure vulnerabilities.Information may be obtained. Huawei Emily-AL00A is a smartphone device from China's Huawei.
There is a security vulnerability in Huawei Emily-AL00A 8.1.0.167 (C00)
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201811-0859",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.167\\(c00\\)"
},
{
"model": "emily-al00a",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a 8.1.0.167",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"db": "NVD",
"id": "CVE-2018-7961"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:huawei:emily-al00a_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
}
]
},
"cve": "CVE-2018-7961",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2018-7961",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 4.9,
"id": "CNVD-2019-33605",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:H/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-137993",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2018-7961",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-7961",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2018-7961",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2019-33605",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201811-655",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-137993",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"db": "VULHUB",
"id": "VHN-137993"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-655"
},
{
"db": "NVD",
"id": "CVE-2018-7961"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to access malicious Website or malicious App and register. Due to incorrect processing of the smart SMS verification code, successful exploitation can cause sensitive information leak. plural Huawei Smartphones contain information disclosure vulnerabilities.Information may be obtained. Huawei Emily-AL00A is a smartphone device from China\u0027s Huawei. \n\nThere is a security vulnerability in Huawei Emily-AL00A 8.1.0.167 (C00)",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-7961"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"db": "VULHUB",
"id": "VHN-137993"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-7961",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2018-014240",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201811-655",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2019-33605",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-137993",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"db": "VULHUB",
"id": "VHN-137993"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-655"
},
{
"db": "NVD",
"id": "CVE-2018-7961"
}
]
},
"id": "VAR-201811-0859",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"db": "VULHUB",
"id": "VHN-137993"
}
],
"trust": 1.31904764
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33605"
}
]
},
"last_update_date": "2024-11-23T23:04:56.145000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "huawei-sa-20181121-02-smartphone",
"trust": 0.8,
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181121-02-smartphone-en"
},
{
"title": "Patch for Huawei Emily-AL00A SMS Verification Code Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/182855"
},
{
"title": "Huawei Emily-AL00A Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=86975"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-655"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-137993"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"db": "NVD",
"id": "CVE-2018-7961"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.2,
"url": "https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20181121-02-smartphone-cn"
},
{
"trust": 1.1,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181121-02-smartphone-en"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7961"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-7961"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"db": "VULHUB",
"id": "VHN-137993"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-655"
},
{
"db": "NVD",
"id": "CVE-2018-7961"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"db": "VULHUB",
"id": "VHN-137993"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-655"
},
{
"db": "NVD",
"id": "CVE-2018-7961"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-09-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"date": "2018-11-27T00:00:00",
"db": "VULHUB",
"id": "VHN-137993"
},
{
"date": "2019-03-14T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"date": "2018-11-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-655"
},
{
"date": "2018-11-27T22:29:00.430000",
"db": "NVD",
"id": "CVE-2018-7961"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-09-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-33605"
},
{
"date": "2019-02-04T00:00:00",
"db": "VULHUB",
"id": "VHN-137993"
},
{
"date": "2019-03-14T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-014240"
},
{
"date": "2019-02-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-655"
},
{
"date": "2024-11-21T04:13:01.547000",
"db": "NVD",
"id": "CVE-2018-7961"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Huawei Information disclosure vulnerability in smartphones",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-014240"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201811-655"
}
],
"trust": 0.6
}
}
VAR-201912-0800
Vulnerability from variot - Updated: 2024-11-23 22:55Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal. plural Huawei For smartphone products, NULL A vulnerability related to pointer dereference exists.Service operation interruption (DoS) There is a possibility of being put into a state. Huawei Harry-AL00C and others are all smartphones from China's Huawei.
A number of Huawei products have security vulnerabilities
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201912-0800",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "johnson-l21d 8.2.0.101",
"scope": null,
"trust": 1.2,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l21c 8.2.0.130",
"scope": null,
"trust": 1.2,
"vendor": "huawei",
"version": null
},
{
"model": "columbia-l29d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.148\\(c185\\)"
},
{
"model": "ever-al00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.0.0.195\\(c00e195r2p1\\)"
},
{
"model": "jackman-l23",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.162\\(c605\\)"
},
{
"model": "ever-l29b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.0.0.207\\(c636e3r2p1\\)"
},
{
"model": "johnson-l42ie",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.155\\(c675r2p1\\)"
},
{
"model": "harry-al10b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l21d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.131\\(c55custc55d1\\)"
},
{
"model": "columbia-l29d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.146\\(c461\\)"
},
{
"model": "columbia-al10b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.163\\(c00\\)"
},
{
"model": "jackman-l23",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.152\\(c45custc45d1\\)"
},
{
"model": "johnson-tl00f",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.100\\(c541custc541d1\\)"
},
{
"model": "potter-al00c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.208\\(c00e205r3p1\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.190\\(c00\\)"
},
{
"model": "jackman-l22",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.156\\(c636r2p2\\)"
},
{
"model": "vogue-al10c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.162\\(c00e160r2p1\\)"
},
{
"model": "johnson-l21c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.136\\(c432custc432d1\\)"
},
{
"model": "neo-al00d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.175\\(c786\\)"
},
{
"model": "johnson-l21c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.130\\(c461r1p1\\)"
},
{
"model": "charlotte-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.176\\(c01\\)"
},
{
"model": "harry-tl00c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.0.1.162\\(c01e160r2p3\\)"
},
{
"model": "johnson-l23c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.133\\(c605custc605d1\\)"
},
{
"model": "jackman-l21",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.160\\(c185\\)"
},
{
"model": "columbia-al10i",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.150\\(c675custc675d2\\)"
},
{
"model": "johnson-l21d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.101\\(c432custc432d1\\)"
},
{
"model": "johnson-tl00d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.100\\(c541custc541d1\\)"
},
{
"model": "ever-l29b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.0.0.206\\(c185e3r3p1\\)"
},
{
"model": "johnson-l22d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.107\\(c636r2p1\\)"
},
{
"model": "tony-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.206\\(c01e200r2p3\\)"
},
{
"model": "vogue-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.162\\(c01e160r2p1\\)"
},
{
"model": "emily-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.175\\(c01\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.153\\(c00\\)"
},
{
"model": "ever-l29b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.0.0.208\\(c432e3r1p12\\)"
},
{
"model": "columbia-l29d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.151\\(c432\\)"
},
{
"model": "johnson-l23c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.130\\(c636custc636d2\\)"
},
{
"model": "johnson-tl00d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.165\\(c01r1p16\\)"
},
{
"model": "johnson-l21d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.101\\(c10custc10d1\\)"
},
{
"model": "princeton-al10b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.211\\(c00e203r2p2\\)"
},
{
"model": "vogue-al00a-preload",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.12\\(c00r1\\)"
},
{
"model": "johnson-l21c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.131\\(c10r2p2\\)"
},
{
"model": "princeton-al10d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.212\\(c00e204r2p2\\)"
},
{
"model": "vogue-al10c-preload",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.12\\(c00r1\\)"
},
{
"model": "harry-al00c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.206\\(c00e205r3p1\\)"
},
{
"model": "johnson-l22d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.105\\(c185r2p1\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.129\\(sp2c01\\)"
},
{
"model": "laya-al00ep",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.0.0.201\\(c786e200r2p1\\)"
},
{
"model": "johnson-al00ic",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.161\\(c675custc675d1\\)"
},
{
"model": "johnson-l42if",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.155\\(c675r2p1\\)"
},
{
"model": "columbia-tl00d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.186\\(c01gt\\)"
},
{
"model": "harry-al10b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.206\\(c00e205r3p1\\)"
},
{
"model": "princeton-al10i",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.0.1.150\\(c675e9r1p4\\)"
},
{
"model": "princeton-tl10c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.211\\(c01e203r2p2\\)"
},
{
"model": "alp-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.129\\(sp2c01\\)"
},
{
"model": "elle-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.162\\(c01e160r2p1\\)"
},
{
"model": "bla-al00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.153\\(c00\\)"
},
{
"model": "bla-al00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.129\\(sp2c786\\)"
},
{
"model": "hima-al00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.0.0.200\\(c00e200r2p1\\)"
},
{
"model": "tony-al00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.206\\(c00e200r2p3\\)"
},
{
"model": "charlotte-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.176\\(c00\\)"
},
{
"model": "elle-al00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.162\\(c00e160r2p1\\)"
},
{
"model": "johnson-al10c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.165\\(c00r1p16\\)"
},
{
"model": "vogue-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.162\\(c00e160r2p1\\)"
},
{
"model": "johnson-l42ic",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.155\\(c675r2p1\\)"
},
{
"model": "johnson-l22c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.107\\(c636r2p1\\)"
},
{
"model": "columbia-l29d",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.151\\(c10\\)"
},
{
"model": "johnson-l22c",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.2.0.105\\(c185r1p1\\)"
},
{
"model": "potter-al10a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "9.1.0.208\\(c00e205r3p1\\)"
},
{
"model": "alp-al00b",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "alp-tl00b",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "bla-al00b",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "charlotte al00a",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "charlotte tl00b",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "columbia al10b",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "columbia al10i",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "columbia l29d",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "columbia tl00d",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "vogue-al10c 9.1.0.162",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "vogue-al10c-preload 9.1.0.12",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "vogue-lgrp1-chn",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "vogue-lgrp2-ovs",
"scope": "eq",
"trust": 0.6,
"vendor": "huawei",
"version": "9.1.0.161"
},
{
"model": "vogue-tl00b 9.1.0.162",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "vogue-al00a-preload 9.1.0.12",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "vogue-al00a-preload 9.1.0.4",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "vogue-al00a 9.1.0.162",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "potter-al10a 9.1.0.208",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "potter-al00c 9.1.0.208",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-tl00f 8.2.0.100",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-tl00d 8.2.0.100",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-tl00d 8.2.0.165",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l42if 8.2.0.110",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l42if 8.2.0.155",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l42ie 8.2.0.155",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l42ic 8.2.0.155",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l23c 8.2.0.130",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l23c 8.2.0.133",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l22d 8.2.0.103",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l22d 8.2.0.105",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l22d 8.2.0.107",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l22c 8.2.0.105",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l22c 8.2.0.107",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l21d 8.2.0.131",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l21c 8.2.0.131",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-l21c 8.2.0.136",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-al10c 8.2.0.165",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-al00ic 8.2.0.161",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-al00c 8.2.0.175",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "johnson-al00c 8.2.0.190",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "jackman-l23 8.2.0.152",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "jackman-l23 8.2.0.162",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "jackman-l22 8.2.0.156",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "jackman-l21 8.2.0.160",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "jackman-l03 8.2.0.163",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "jackman-al00d 8.2.0.170",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "jackman-al00d 8.2.0.188",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "harry-tl00c 9.0.1.162",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "harry-lgrp1-chn",
"scope": "eq",
"trust": 0.6,
"vendor": "huawei",
"version": "9.1.0.206"
},
{
"model": "harry-al10b 9.1.0.206",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "harry-al00c-preload 9.0.1.5",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "harry-al00c-preload 9.1.0.1",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "harry-al00c 9.1.0.206",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-44950"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"db": "NVD",
"id": "CVE-2019-5235"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:huawei:alp-al00b_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:alp-tl00b_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:bla-al00b_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:bla-tl00b_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:charlotte-al00a_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:charlotte-tl00b_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:columbia-al10b_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:columbia-al10i_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:columbia-l29d_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:columbia-tl00d_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The vulnerability was discovered by Huawei internal testing.",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-1739"
}
],
"trust": 0.6
},
"cve": "CVE-2019-5235",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2019-5235",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2019-44950",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2019-5235",
"impactScore": 1.4,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "Low",
"baseScore": 5.3,
"baseSeverity": "Medium",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2019-5235",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-5235",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2019-5235",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2019-44950",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201908-1739",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-44950"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1739"
},
{
"db": "NVD",
"id": "CVE-2019-5235"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal. plural Huawei For smartphone products, NULL A vulnerability related to pointer dereference exists.Service operation interruption (DoS) There is a possibility of being put into a state. Huawei Harry-AL00C and others are all smartphones from China\u0027s Huawei. \n\nA number of Huawei products have security vulnerabilities",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-5235"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"db": "CNVD",
"id": "CNVD-2019-44950"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-5235",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013429",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2019-44950",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1739",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-44950"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1739"
},
{
"db": "NVD",
"id": "CVE-2019-5235"
}
]
},
"id": "VAR-201912-0800",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-44950"
}
],
"trust": 1.3101601173809525
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"IoT"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-44950"
}
]
},
"last_update_date": "2024-11-23T22:55:20.022000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "huawei-sa-20190821-01-smartphone",
"trust": 0.8,
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en"
},
{
"title": "Patch for Unknown vulnerabilities in multiple Huawei products",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/193797"
},
{
"title": "Multiple Huawei Product security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97323"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-44950"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1739"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-476",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"db": "NVD",
"id": "CVE-2019-5235"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.6,
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-5235"
},
{
"trust": 1.2,
"url": "https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20190821-01-smartphone-cn"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-5235"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-44950"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1739"
},
{
"db": "NVD",
"id": "CVE-2019-5235"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-44950"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1739"
},
{
"db": "NVD",
"id": "CVE-2019-5235"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-12-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-44950"
},
{
"date": "2020-01-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"date": "2019-08-21T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-1739"
},
{
"date": "2019-12-14T00:15:10.977000",
"db": "NVD",
"id": "CVE-2019-5235"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-12-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-44950"
},
{
"date": "2020-01-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-013429"
},
{
"date": "2019-12-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-1739"
},
{
"date": "2024-11-21T04:44:34.617000",
"db": "NVD",
"id": "CVE-2019-5235"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-1739"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Huawei In smartphone products NULL Pointer dereference vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-013429"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "code problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-1739"
}
],
"trust": 0.6
}
}
VAR-201811-0558
Vulnerability from variot - Updated: 2024-11-23 22:45The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability. Huawei smartphone Emily-AL00A Contains an authorization vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Emily-AL00A is a smartphone launched by Huawei. Huawei Emily-AL00A is a smartphone device from the Chinese company Huawei
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201811-0558",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "emily-al00a",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.171\\(c00\\)"
},
{
"model": "emily-al00a",
"scope": "lt",
"trust": 0.8,
"vendor": "huawei",
"version": "8.1.0.171(c00)"
},
{
"model": "emily-al00a \u003c8.1.0.171",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 0.6,
"vendor": "huawei",
"version": "8.1.0.107\\(sp5c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 0.6,
"vendor": "huawei",
"version": "8.1.0.106\\(sp2c00\\)"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-080"
},
{
"db": "NVD",
"id": "CVE-2018-7925"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:huawei:emily-al00a_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
}
]
},
"cve": "CVE-2018-7925",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.9,
"id": "CVE-2018-7925",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 6.5,
"id": "CNVD-2018-22640",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.9,
"id": "VHN-137957",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 0.9,
"id": "CVE-2018-7925",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-7925",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2018-7925",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2018-22640",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201811-080",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-137957",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"db": "VULHUB",
"id": "VHN-137957"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-080"
},
{
"db": "NVD",
"id": "CVE-2018-7925"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability. Huawei smartphone Emily-AL00A Contains an authorization vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Emily-AL00A is a smartphone launched by Huawei. Huawei Emily-AL00A is a smartphone device from the Chinese company Huawei",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-7925"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"db": "VULHUB",
"id": "VHN-137957"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-7925",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011723",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201811-080",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2018-22640",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-137957",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"db": "VULHUB",
"id": "VHN-137957"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-080"
},
{
"db": "NVD",
"id": "CVE-2018-7925"
}
]
},
"id": "VAR-201811-0558",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"db": "VULHUB",
"id": "VHN-137957"
}
],
"trust": 1.31904764
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-22640"
}
]
},
"last_update_date": "2024-11-23T22:45:09.023000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "huawei-sa-20181105-01-smartphone",
"trust": 0.8,
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181105-01-smartphone-en"
},
{
"title": "HuaweiEmily-AL00A mobile phone lock screen bypass vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/143923"
},
{
"title": "Huawei Emily-AL00A Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=86602"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-080"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-863",
"trust": 1.1
},
{
"problemtype": "CWE-285",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-137957"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"db": "NVD",
"id": "CVE-2018-7925"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181105-01-smartphone-en"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7925"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-7925"
},
{
"trust": 0.6,
"url": "https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20181105-01-smartphone-cn"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"db": "VULHUB",
"id": "VHN-137957"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-080"
},
{
"db": "NVD",
"id": "CVE-2018-7925"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"db": "VULHUB",
"id": "VHN-137957"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-080"
},
{
"db": "NVD",
"id": "CVE-2018-7925"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-11-07T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"date": "2018-11-13T00:00:00",
"db": "VULHUB",
"id": "VHN-137957"
},
{
"date": "2019-01-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"date": "2018-11-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-080"
},
{
"date": "2018-11-13T19:29:00.430000",
"db": "NVD",
"id": "CVE-2018-7925"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-11-07T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-22640"
},
{
"date": "2019-10-03T00:00:00",
"db": "VULHUB",
"id": "VHN-137957"
},
{
"date": "2019-01-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011723"
},
{
"date": "2019-10-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-080"
},
{
"date": "2024-11-21T04:12:58.133000",
"db": "NVD",
"id": "CVE-2018-7925"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201811-080"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Huawei smartphone Emily-AL00A Authorization vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011723"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "lack of information",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201811-080"
}
],
"trust": 0.6
}
}
VAR-201911-0263
Vulnerability from variot - Updated: 2024-11-23 22:37Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.202(C185E2R1P12) have a double free vulnerability. An attacker tricks the user into installing a malicious application, which frees on the same memory address twice. Successful exploit could result in malicious code execution. plural Huawei Of smartphone products Bastet The module contains a double release vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Huawei Hima-AL00B is a smart phone from Huawei of China
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201911-0263",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "hima-l29ca",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "hima-l29ca_9.0.0.198\\(c432e10r1p16\\)"
},
{
"model": "hima-l29c",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "hima-l29c_9.0.0.204\\(c636e10r2p1\\)"
},
{
"model": "emily-l29c",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "emily-l29c_9.0.0.203\\(c432e7r1p11\\)"
},
{
"model": "emily-l29c",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "emily-l29c_9.0.0.205\\(c635e2r1p11\\)"
},
{
"model": "emily-l29c",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "emily-l29c_9.0.0.202\\(c185e2r1p12\\)"
},
{
"model": "hima-l09ca",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "hima-l09ca_9.0.0.198\\(c432e10r1p16\\)"
},
{
"model": "emily-l29c",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "emily-l29c_9.0.0.207\\(c636e7r1p13\\)"
},
{
"model": "emily-al00a",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "emily-al00a_9.0.0.182\\(c00e82r1p21\\)"
},
{
"model": "emily-l09c",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "emily-l09c_9.0.0.203\\(c432e7r1p11\\)"
},
{
"model": "emily-tl00b",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "emily-tl00b_9.0.0.182\\(c01e82r1p21\\)"
},
{
"model": "emily-al00a",
"scope": "lt",
"trust": 0.8,
"vendor": "huawei",
"version": "9.0.0.182(c00e82r1p21)"
},
{
"model": "emily-l09c",
"scope": "lt",
"trust": 0.8,
"vendor": "huawei",
"version": "9.0.0.203(c432e7r1p11)"
},
{
"model": "emily-l29c",
"scope": "lt",
"trust": 0.8,
"vendor": "huawei",
"version": "9.0.0.202(c185e2r1p12)"
},
{
"model": "emily-l29c",
"scope": "lt",
"trust": 0.8,
"vendor": "huawei",
"version": "9.0.0.203(c432e7r1p11)"
},
{
"model": "emily-tl00b",
"scope": "lt",
"trust": 0.8,
"vendor": "huawei",
"version": "9.0.0.182(c01e82r1p21)"
},
{
"model": "hima-l09ca",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hima-l29c",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hima-l29ca",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "hima-al00b \u003chma-al00c00b175",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33624"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"db": "NVD",
"id": "CVE-2019-5282"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:huawei:emily-al00a_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:emily-l09c_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:emily-l29c_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:emily-tl00b_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hima-l09ca_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hima-l29c_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:hima-l29ca_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The vulnerability was discovered by Huawei internal testing.",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201902-787"
}
],
"trust": 0.6
},
"cve": "CVE-2019-5282",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2019-5282",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.9,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "CNVD-2019-33624",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.8,
"id": "CVE-2019-5282",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Local",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 7.8,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2019-5282",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-5282",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2019-5282",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2019-33624",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201902-787",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2019-5282",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33624"
},
{
"db": "VULMON",
"id": "CVE-2019-5282"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-787"
},
{
"db": "NVD",
"id": "CVE-2019-5282"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.202(C185E2R1P12) have a double free vulnerability. An attacker tricks the user into installing a malicious application, which frees on the same memory address twice. Successful exploit could result in malicious code execution. plural Huawei Of smartphone products Bastet The module contains a double release vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Huawei Hima-AL00B is a smart phone from Huawei of China",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-5282"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"db": "CNVD",
"id": "CNVD-2019-33624"
},
{
"db": "VULMON",
"id": "CVE-2019-5282"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-5282",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011960",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2019-33624",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201902-787",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2019-5282",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33624"
},
{
"db": "VULMON",
"id": "CVE-2019-5282"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-787"
},
{
"db": "NVD",
"id": "CVE-2019-5282"
}
]
},
"id": "VAR-201911-0263",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33624"
}
],
"trust": 1.2188492133333333
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33624"
}
]
},
"last_update_date": "2024-11-23T22:37:36.869000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "huawei-sa-20190220-01-smartphone",
"trust": 0.8,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-smartphone-en"
},
{
"title": "Patch for Huawei Hima-AL00B Memory Redelivery Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/182849"
},
{
"title": "Huawei Hima-AL00B Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=89583"
},
{
"title": "Huawei Security Advisories: Security Advisory - Double Free Vulnerability on Bastet Module of Some Huawei Smartphones",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=huawei_security_advisories\u0026qid=489b1c2b72b29ac6dabb7a5731975d51"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33624"
},
{
"db": "VULMON",
"id": "CVE-2019-5282"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-787"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-415",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"db": "NVD",
"id": "CVE-2019-5282"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.8,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-smartphone-en"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-5282"
},
{
"trust": 1.2,
"url": "https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20190220-01-smartphone-cn"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-5282"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/415.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-33624"
},
{
"db": "VULMON",
"id": "CVE-2019-5282"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-787"
},
{
"db": "NVD",
"id": "CVE-2019-5282"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-33624"
},
{
"db": "VULMON",
"id": "CVE-2019-5282"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"db": "CNNVD",
"id": "CNNVD-201902-787"
},
{
"db": "NVD",
"id": "CVE-2019-5282"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-09-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-33624"
},
{
"date": "2019-11-13T00:00:00",
"db": "VULMON",
"id": "CVE-2019-5282"
},
{
"date": "2019-11-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"date": "2019-02-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201902-787"
},
{
"date": "2019-11-13T14:15:10.457000",
"db": "NVD",
"id": "CVE-2019-5282"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-09-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-33624"
},
{
"date": "2019-11-15T00:00:00",
"db": "VULMON",
"id": "CVE-2019-5282"
},
{
"date": "2019-11-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-011960"
},
{
"date": "2019-11-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201902-787"
},
{
"date": "2024-11-21T04:44:39.970000",
"db": "NVD",
"id": "CVE-2019-5282"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201902-787"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Huawei Of smartphone products Bastet Double release vulnerability in modules",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-011960"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "resource management error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201902-787"
}
],
"trust": 0.6
}
}
VAR-201807-1847
Vulnerability from variot - Updated: 2024-11-23 22:26Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerability. An attacker gets some user's smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP function and use the phone normally. Emily-AL00A Contains vulnerabilities related to authorization, permissions, and access control.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. HuaweiEmily-AL00A is a smartphone device from China's Huawei company. There is a security vulnerability in the HuaweiEmily-AL00A8.1.0.106 (SP2C00) version and 8.1.0.107 (SP5C00)
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201807-1847",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.1.0.107\\(sp5c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.1.0.106\\(sp2c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 0.8,
"vendor": "huawei",
"version": "8.1.0.106(sp2c00)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 0.8,
"vendor": "huawei",
"version": "8.1.0.107(sp5c00)"
},
{
"model": "emily-al00a 8.1.0.106",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a 8.1.0.107",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-323"
},
{
"db": "NVD",
"id": "CVE-2018-7944"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:huawei:emily-al00a_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
}
]
},
"cve": "CVE-2018-7944",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "CVE-2018-7944",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CNVD-2018-12773",
"impactScore": 6.9,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "VHN-137976",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 0.9,
"id": "CVE-2018-7944",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-7944",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2018-7944",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2018-12773",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201807-323",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-137976",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"db": "VULHUB",
"id": "VHN-137976"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-323"
},
{
"db": "NVD",
"id": "CVE-2018-7944"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerability. An attacker gets some user\u0027s smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP function and use the phone normally. Emily-AL00A Contains vulnerabilities related to authorization, permissions, and access control.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. HuaweiEmily-AL00A is a smartphone device from China\u0027s Huawei company. There is a security vulnerability in the HuaweiEmily-AL00A8.1.0.106 (SP2C00) version and 8.1.0.107 (SP5C00)",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-7944"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"db": "VULHUB",
"id": "VHN-137976"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-7944",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008042",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201807-323",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2018-12773",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-137976",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"db": "VULHUB",
"id": "VHN-137976"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-323"
},
{
"db": "NVD",
"id": "CVE-2018-7944"
}
]
},
"id": "VAR-201807-1847",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"db": "VULHUB",
"id": "VHN-137976"
}
],
"trust": 1.31904764
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-12773"
}
]
},
"last_update_date": "2024-11-23T22:26:15.757000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "huawei-sa-20180622-01-bypass",
"trust": 0.8,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180622-01-bypass-en"
},
{
"title": "HuaweiEmily-AL00A Override Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/133827"
},
{
"title": "Huawei Emily-AL00A Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=81761"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-323"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-264",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-137976"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"db": "NVD",
"id": "CVE-2018-7944"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.3,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180622-01-bypass-en"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7944"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-7944"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"db": "VULHUB",
"id": "VHN-137976"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-323"
},
{
"db": "NVD",
"id": "CVE-2018-7944"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"db": "VULHUB",
"id": "VHN-137976"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-323"
},
{
"db": "NVD",
"id": "CVE-2018-7944"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-07-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"date": "2018-07-05T00:00:00",
"db": "VULHUB",
"id": "VHN-137976"
},
{
"date": "2018-10-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"date": "2018-07-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201807-323"
},
{
"date": "2018-07-05T18:29:00.737000",
"db": "NVD",
"id": "CVE-2018-7944"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-07-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-12773"
},
{
"date": "2019-10-03T00:00:00",
"db": "VULHUB",
"id": "VHN-137976"
},
{
"date": "2018-10-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-008042"
},
{
"date": "2019-10-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201807-323"
},
{
"date": "2024-11-21T04:13:00.210000",
"db": "NVD",
"id": "CVE-2018-7944"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201807-323"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Emily-AL00A Vulnerabilities related to authorization, permissions, and access control",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-008042"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control issues",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201807-323"
}
],
"trust": 0.6
}
}
VAR-201807-1848
Vulnerability from variot - Updated: 2024-11-23 22:12Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones. Emily-AL00A Contains an authentication vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. HuaweiEmily-AL00A is a smartphone device from China's Huawei company. The following products and versions are affected: Huawei Anne-AL00 before 9.1.0.122 (C00E120R1P7T8); Honor Play 7A before 8.0.0.213 (C00); Atomu-L03 before 8.0.0.159 (C605CUSTC605D1); Atomu-L11 8.0. 0.149(C782CUSTC782D1) previous version; Atomu-L21 8.0.0.153(C432CUSTC432D1) previous version; Atomu-L23 8.0.0.162(C605CUSTC605D1) previous version; Atomu-L29A 8.0.0.149(C432CUSTC432D1) previous version, 8.0.0.149(C461CUSTC461D1) Before Version, version before 8.0.0.150(C185CUSTC185D1), version before 8.0.0.165(C636CUSTC636D1); version before Atomu-L41 8.0.0.151(C461CUSTC461D1); version before Atomu-L42 8.0.0.153(C636CUSTC636D1-1.0.8.10Berkeley); Version before (C01E181R1P14T8); Version before Delhi-L42 Version before Delhi-L42C185B123, Version before Delhi-L42C432B136; Version before Duke-L09 Version Duke-L09C10B187, Version Duke-L09C432B189, Version Duke-L09C636B189; Figo-L03 8.0.0.137 (C605) version; Figo-L11 8.0.0.135 (C432) version, 9.1.0
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201807-1848",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "emily-al00a",
"scope": "lt",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.153\\(c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 0.8,
"vendor": "huawei",
"version": "8.1.0.153(c00)"
},
{
"model": "emily-al00a \u003c8.1.0.153",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 0.6,
"vendor": "huawei",
"version": "8.1.0.107\\(sp5c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 0.6,
"vendor": "huawei",
"version": "8.1.0.106\\(sp2c00\\)"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-2012"
},
{
"db": "NVD",
"id": "CVE-2018-7947"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:huawei:emily-al00a_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
}
]
},
"cve": "CVE-2018-7947",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.4,
"id": "CVE-2018-7947",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 6.5,
"id": "CNVD-2018-13551",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.4,
"id": "VHN-137979",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:L/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "nvd@nist.gov",
"availabilityImpact": "LOW",
"baseScore": 3.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"exploitabilityScore": 0.5,
"id": "CVE-2018-7947",
"impactScore": 3.4,
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-7947",
"trust": 1.0,
"value": "LOW"
},
{
"author": "NVD",
"id": "CVE-2018-7947",
"trust": 0.8,
"value": "Low"
},
{
"author": "CNVD",
"id": "CNVD-2018-13551",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201807-2012",
"trust": 0.6,
"value": "LOW"
},
{
"author": "VULHUB",
"id": "VHN-137979",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"db": "VULHUB",
"id": "VHN-137979"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-2012"
},
{
"db": "NVD",
"id": "CVE-2018-7947"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones. Emily-AL00A Contains an authentication vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. HuaweiEmily-AL00A is a smartphone device from China\u0027s Huawei company. The following products and versions are affected: Huawei Anne-AL00 before 9.1.0.122 (C00E120R1P7T8); Honor Play 7A before 8.0.0.213 (C00); Atomu-L03 before 8.0.0.159 (C605CUSTC605D1); Atomu-L11 8.0. 0.149(C782CUSTC782D1) previous version; Atomu-L21 8.0.0.153(C432CUSTC432D1) previous version; Atomu-L23 8.0.0.162(C605CUSTC605D1) previous version; Atomu-L29A 8.0.0.149(C432CUSTC432D1) previous version, 8.0.0.149(C461CUSTC461D1) Before Version, version before 8.0.0.150(C185CUSTC185D1), version before 8.0.0.165(C636CUSTC636D1); version before Atomu-L41 8.0.0.151(C461CUSTC461D1); version before Atomu-L42 8.0.0.153(C636CUSTC636D1-1.0.8.10Berkeley); Version before (C01E181R1P14T8); Version before Delhi-L42 Version before Delhi-L42C185B123, Version before Delhi-L42C432B136; Version before Duke-L09 Version Duke-L09C10B187, Version Duke-L09C432B189, Version Duke-L09C636B189; Figo-L03 8.0.0.137 (C605) version; Figo-L11 8.0.0.135 (C432) version, 9.1.0",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-7947"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"db": "VULHUB",
"id": "VHN-137979"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-7947",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008888",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201807-2012",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2018-13551",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-137979",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"db": "VULHUB",
"id": "VHN-137979"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-2012"
},
{
"db": "NVD",
"id": "CVE-2018-7947"
}
]
},
"id": "VAR-201807-1848",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"db": "VULHUB",
"id": "VHN-137979"
}
],
"trust": 1.31904764
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-13551"
}
]
},
"last_update_date": "2024-11-23T22:12:27.299000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "huawei-sa-20180720-01-mobile",
"trust": 0.8,
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180720-01-mobile-en"
},
{
"title": "HuaweiEmily-AL00A authentication bypass vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/134843"
},
{
"title": "Huawei Emily-AL00A Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=82739"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-2012"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-287",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-137979"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"db": "NVD",
"id": "CVE-2018-7947"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.2,
"url": "https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20180720-01-mobile-cn"
},
{
"trust": 1.1,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180720-01-mobile-en"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7947"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-7947"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"db": "VULHUB",
"id": "VHN-137979"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-2012"
},
{
"db": "NVD",
"id": "CVE-2018-7947"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"db": "VULHUB",
"id": "VHN-137979"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-2012"
},
{
"db": "NVD",
"id": "CVE-2018-7947"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-07-20T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"date": "2018-07-31T00:00:00",
"db": "VULHUB",
"id": "VHN-137979"
},
{
"date": "2018-10-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"date": "2018-08-01T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201807-2012"
},
{
"date": "2018-07-31T14:29:00.980000",
"db": "NVD",
"id": "CVE-2018-7947"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-07-20T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-13551"
},
{
"date": "2018-10-04T00:00:00",
"db": "VULHUB",
"id": "VHN-137979"
},
{
"date": "2018-10-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-008888"
},
{
"date": "2020-07-30T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201807-2012"
},
{
"date": "2024-11-21T04:13:00.450000",
"db": "NVD",
"id": "CVE-2018-7947"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201807-2012"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Emily-AL00A Authentication vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-008888"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "authorization issue",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201807-2012"
}
],
"trust": 0.6
}
}
VAR-201810-1162
Vulnerability from variot - Updated: 2024-11-23 22:00Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed. plural Huawei Smartphones have vulnerabilities related to security functions.Information may be tampered with. Huawei ALP-AL00B is a smartphone product of China Huawei. The following products and versions are affected: Huawei ALP-AL00B Version 8.0.0.106(C00), Version 8.0.0.113(SP2C00), Version 8.0.0.113(SP3C00), Version 8.0.0.113(SP7C00), Version 8.0.0.118(C00) , 8.0.0.120 (SP2C00) version, 8.0.0.125 (SP1C00) version, 8.0.0.125 (SP3C00) version, 8.0.0.126 (SP2C00) version, 8.0.0.126 (SP5C00) version, 8.0.0.127 (SP1C00) version, 8.0 .0.128(SP2C00) version; ALP-AL00B-RSC 1.0.0.2 version; BLA-TL00B 8.0.0.113(SP7C01) version, 8.0.0.118(C01) version, 8.0.0.120(SP2C01) version, 8.0.0.125(SP1C01) version Version, 8.0.0.125(SP2C01) version, 8.0.0.125(SP3C01) version, 8.0.0.126(SP2C01) version, 8.0.0.126(SP5C01) version, 8.0.0.127(SP1C01) version, 8.0.0.128(SP2C01) version, 8.0.0.129 (SP2C01) version; Charlotte-AL00A 8.1.0.105 (SP7C00) version, 8.1.0.106 (SP3C00) version, 8.1.0.107 (SP5C00) version, 8.1.0.107 (SP7C00) version, 8.1.0.108 (SP3C00) version , 8.1.0.108 (SP6C00) version, 8.1.0.109 (SP2C00) version; Emily-AL00A 8.1.0.105 (SP6C00) version, 8.1.0.106 (SP2C00) version, 8.1.0.107 (SP5C00) version, 8.1.0.107 (SP7C00) Version, 8.1.0
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201810-1162",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "alp-al00b 8.0.0.113",
"scope": null,
"trust": 1.8,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b 8.0.0.125",
"scope": null,
"trust": 1.8,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b-rsc",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "1.0.0.2"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.113\\(sp7c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.126\\(sp2c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.125\\(sp3c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.118\\(c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.126\\(sp5c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.106\\(c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.125\\(sp1c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.113\\(sp2c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.113\\(sp3c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.6,
"vendor": "huawei",
"version": "8.0.0.120\\(sp2c00\\)"
},
{
"model": "emily-al00a 8.1.0.107",
"scope": null,
"trust": 1.2,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b 8.0.0.125",
"scope": null,
"trust": 1.2,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b 8.0.0.126",
"scope": null,
"trust": 1.2,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b 8.0.0.126",
"scope": null,
"trust": 1.2,
"vendor": "huawei",
"version": null
},
{
"model": "charlotte-al00a 8.1.0.107",
"scope": null,
"trust": 1.2,
"vendor": "huawei",
"version": null
},
{
"model": "charlotte-al00a 8.1.0.108",
"scope": null,
"trust": 1.2,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a 8.1.0.108",
"scope": null,
"trust": 1.2,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.107\\(sp5c00\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.113\\(sp7c01\\)"
},
{
"model": "charlotte-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.108\\(sp3c00\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.126\\(sp5c01\\)"
},
{
"model": "charlotte-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.105\\(sp7c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.108\\(sp2c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.108\\(sp6c00\\)"
},
{
"model": "charlotte-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.107\\(sp7c00\\)"
},
{
"model": "charlotte-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.107\\(sp5c00\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.125\\(sp3c01\\)"
},
{
"model": "charlotte-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.109\\(sp2c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.105\\(sp6c00\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.120\\(sp2c01\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.129\\(sp2c01\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.125\\(sp2c01\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.128\\(sp2c01\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.128\\(sp2c00\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.125\\(sp1c01\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.118\\(c01\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.126\\(sp2c01\\)"
},
{
"model": "charlotte-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.108\\(sp6c00\\)"
},
{
"model": "bla-tl00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.127\\(sp1c01\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.107\\(sp7c00\\)"
},
{
"model": "charlotte-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.106\\(sp3c00\\)"
},
{
"model": "alp-al00b",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.0.0.127\\(sp1c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.106\\(sp2c00\\)"
},
{
"model": "emily-al00a",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "8.1.0.109\\(sp5c00\\)"
},
{
"model": "alp-al00b",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b-rsc",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "charlotte al00a",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a 8.1.0.106",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b 8.0.0.106",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b 8.0.0.118d",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b 8.0.0.118",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b 8.0.0.120",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b 8.0.0.127",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "alp-al00b 8.0.0.128",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b 8.0.0.113",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b 8.0.0.118",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b 8.0.0.120",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b 8.0.0.127",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b 8.0.0.128",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "bla-tl00b 8.0.0.129",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "charlotte-al00a 8.1.0.105",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "charlotte-al00a 8.1.0.106",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "charlotte-al00a 8.1.0.109",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a 8.1.0.105",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
},
{
"model": "emily-al00a 8.1.0.109",
"scope": null,
"trust": 0.6,
"vendor": "huawei",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-1175"
},
{
"db": "NVD",
"id": "CVE-2018-7911"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:huawei:alp-al00b_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:alp-al00b-rsc_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:bla-tl00b_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:charlotte-al00a_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:huawei:emily-al00a_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
}
]
},
"cve": "CVE-2018-7911",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2018-7911",
"impactScore": 6.9,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CNVD-2019-41255",
"impactScore": 6.9,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "VHN-137943",
"impactScore": 6.9,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:N/I:C/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"exploitabilityScore": 0.9,
"id": "CVE-2018-7911",
"impactScore": 3.6,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-7911",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2018-7911",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2019-41255",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201810-1175",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-137943",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"db": "VULHUB",
"id": "VHN-137943"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-1175"
},
{
"db": "NVD",
"id": "CVE-2018-7911"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed. plural Huawei Smartphones have vulnerabilities related to security functions.Information may be tampered with. Huawei ALP-AL00B is a smartphone product of China Huawei. The following products and versions are affected: Huawei ALP-AL00B Version 8.0.0.106(C00), Version 8.0.0.113(SP2C00), Version 8.0.0.113(SP3C00), Version 8.0.0.113(SP7C00), Version 8.0.0.118(C00) , 8.0.0.120 (SP2C00) version, 8.0.0.125 (SP1C00) version, 8.0.0.125 (SP3C00) version, 8.0.0.126 (SP2C00) version, 8.0.0.126 (SP5C00) version, 8.0.0.127 (SP1C00) version, 8.0 .0.128(SP2C00) version; ALP-AL00B-RSC 1.0.0.2 version; BLA-TL00B 8.0.0.113(SP7C01) version, 8.0.0.118(C01) version, 8.0.0.120(SP2C01) version, 8.0.0.125(SP1C01) version Version, 8.0.0.125(SP2C01) version, 8.0.0.125(SP3C01) version, 8.0.0.126(SP2C01) version, 8.0.0.126(SP5C01) version, 8.0.0.127(SP1C01) version, 8.0.0.128(SP2C01) version, 8.0.0.129 (SP2C01) version; Charlotte-AL00A 8.1.0.105 (SP7C00) version, 8.1.0.106 (SP3C00) version, 8.1.0.107 (SP5C00) version, 8.1.0.107 (SP7C00) version, 8.1.0.108 (SP3C00) version , 8.1.0.108 (SP6C00) version, 8.1.0.109 (SP2C00) version; Emily-AL00A 8.1.0.105 (SP6C00) version, 8.1.0.106 (SP2C00) version, 8.1.0.107 (SP5C00) version, 8.1.0.107 (SP7C00) Version, 8.1.0",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-7911"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"db": "VULHUB",
"id": "VHN-137943"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-7911",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011813",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201810-1175",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2019-41255",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-137943",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"db": "VULHUB",
"id": "VHN-137943"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-1175"
},
{
"db": "NVD",
"id": "CVE-2018-7911"
}
]
},
"id": "VAR-201810-1162",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"db": "VULHUB",
"id": "VHN-137943"
}
],
"trust": 1.32919975
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-41255"
}
]
},
"last_update_date": "2024-11-23T22:00:12.504000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "huawei-sa-20180822-01-frpbypass",
"trust": 0.8,
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180822-01-frpbypass-en"
},
{
"title": "Patch for A variety of Huawei products FRP bypass vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/190763"
},
{
"title": "Multiple Huawei Product security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=86273"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-1175"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-254",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-137943"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"db": "NVD",
"id": "CVE-2018-7911"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.3,
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180822-01-frpbypass-en"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7911"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-7911"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"db": "VULHUB",
"id": "VHN-137943"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-1175"
},
{
"db": "NVD",
"id": "CVE-2018-7911"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"db": "VULHUB",
"id": "VHN-137943"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"db": "CNNVD",
"id": "CNNVD-201810-1175"
},
{
"db": "NVD",
"id": "CVE-2018-7911"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-11-19T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"date": "2018-10-23T00:00:00",
"db": "VULHUB",
"id": "VHN-137943"
},
{
"date": "2019-01-23T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"date": "2018-10-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201810-1175"
},
{
"date": "2018-10-23T14:29:04.437000",
"db": "NVD",
"id": "CVE-2018-7911"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-11-19T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-41255"
},
{
"date": "2019-10-03T00:00:00",
"db": "VULHUB",
"id": "VHN-137943"
},
{
"date": "2019-01-23T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-011813"
},
{
"date": "2019-10-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201810-1175"
},
{
"date": "2024-11-21T04:12:57.430000",
"db": "NVD",
"id": "CVE-2018-7911"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201810-1175"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Huawei Vulnerabilities related to security functions in smartphones",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-011813"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "lack of information",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201810-1175"
}
],
"trust": 0.6
}
}