PT-2018-18330 · Huawei · Huawei Mate 9

Publicado 2018-04-11 · Atualizado 2018-05-24 · CVE-2018-7930

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Média

Vetor base

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 versions prior to MHA-L29B 8.0.0.366(C567)

Description: The issue is related to an information leak due to insufficient validation on data transfer requests in the Near Field Communication (NFC) module. When an affected mobile phone sends files to another device using the NFC function, an attacker can obtain arbitrary files, causing information leaks.

Recommendations: For versions prior to MHA-L29B 8.0.0.366(C567), update to version MHA-L29B 8.0.0.366(C567) or later to resolve the issue. As a temporary workaround, consider disabling the NFC function to minimize the risk of exploitation. Restrict access to sensitive files on the device to reduce the potential impact of the information leak.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-7930

Produtos afetados

Huawei Mate 9

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-7930 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20180411-01-smartphone-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7930 · Nota de Segurança