Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-7988

Опубликовано: 27 нояб. 2018
Источник: nvd
CVSS3: 4.6
CVSS2: 3.6
EPSS Низкий

Описание

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:nova_2_plus_firmware:*:*:*:*:*:*:*:*
Версия до 8.0.0.350\(c00\) (исключая)
cpe:2.3:h:huawei:nova_2_plus:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*
Версия до 8.0.0.363\(c00\) (исключая)
cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*

EPSS

Процентиль: 6%
0.00024
Низкий

4.6 Medium

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.6
github
больше 3 лет назад

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.

EPSS

Процентиль: 6%
0.00024
Низкий

4.6 Medium

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-863