Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-7938

Опубликовано: 04 сент. 2018
Источник: nvd
CVSS3: 3.3
CVSS2: 4.3
EPSS Низкий

Описание

P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number, which may cause sensitive information leak.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*
Версия до victoria-al00ac00b217 (исключая)
cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:*

EPSS

Процентиль: 25%
0.00089
Низкий

3.3 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 3.3
github
больше 3 лет назад

P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number, which may cause sensitive information leak.

EPSS

Процентиль: 25%
0.00089
Низкий

3.3 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200