PT-2018-18313 · Huawei · Huawei Alp-Al00B+1

Publicado 2018-04-30 · Atualizado 2019-10-03 · CVE-2018-7901

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Huawei ALP-AL00B smart phones versions prior to 8.0.0.129 Huawei BLA-AL00B smart phones versions prior to 8.0.0.129

Description: The issue concerns a remote control vulnerability in the RCS module. An attacker can trick a user into installing a malicious application, which requires the user to manually agree to its connection with RCS. The attacker must also obtain the authentication key used by RCS. Successful exploitation may allow the attacker to remotely control the keyboard.

Recommendations: For Huawei ALP-AL00B smart phones versions prior to 8.0.0.129, update to version 8.0.0.129 or later. For Huawei BLA-AL00B smart phones versions prior to 8.0.0.129, update to version 8.0.0.129 or later.

Correção

Identificadores relacionados

CVE-2018-7901

Produtos afetados

Huawei Alp-Al00B

Huawei Bla-Al00B

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-7901 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7901 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20180425-01-rcs-en · Aviso do Fabricante