CVE-2018-7910 Auth bypass in ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C
Attackers with physical access can bypass authentication to replace startup programs, gaining control and reading data on Huawei smartphones.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-7910?
CVE-2018-7910 is a medium-severity authentication bypass vulnerability in Huawei Technologies Co., Ltd. ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C, published on 13 Nov 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C432), BLA-L29C 8.0.0.129(C432), 8.0.0.137(C432) have an authentication bypass vulnerability. When the attacker obtains the user's smartphone, the vulnerability can be used to replace the start-up program so that the attacker can obtain the information in the smartphone and achieve the purpose of controlling the smartphone.
Weakness: CWE-287
Which versions are affected by CVE-2018-7910?
It affects 5 products.
Products include Huawei Alp-Al00b Firmware, Huawei Alp-Tl00b Firmware, Huawei Bla-Al00b Firmware, Huawei Bla-L09c Firmware, Huawei Bla-L29c Firmware.
How do I fix CVE-2018-7910?
No fix has been published for CVE-2018-7910 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-7910 being exploited?
There is no known exploitation of CVE-2018-7910 in the wild and no public exploit code.
Other vulnerabilities in Huawei Technologies Co., Ltd. ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C
- CVE-2019-5302 Denial of service in ALP-AL00B
- CVE-2019-5303 Denial of service in ALP-AL00B
- CVE-2019-5235 Null dereference in Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B, Harry-LGRP1-CHN, Harry-TL00C, Jackman-AL00D, Jackman-L03, Jackman-L21, Jackman-L22, Jackman-L23, Johnson-AL00C, Johnson-AL00IC, Johnson-AL10C, Johnson-L21C, Johnson-L21D, Johnson-L22C, Johnson-L22D, Johnson-L23C, Johnson-L42IC, Johnson-L42IE, Johnson-L42IF, Johnson-TL00D, Johnson-TL00F, Potter-AL00C, Potter-AL10A, VOGUE-AL00A, VOGUE-AL00A-PRELOAD, VOGUE-AL10C, VOGUE-AL10C-PRELOAD, VOGUE-LGRP1-CHN, VOGUE-LGRP2-OVS, VOGUE-TL00B
- CVE-2019-19412 Security feature bypass in ALP-AL00B
- CVE-2018-7901 Security feature bypass in ALP-AL00B, BLA-AL00B
Sources
Also known as GHSA-ppxp-5c57-gjq2.