PT-2018-18330 · Huawei · Huawei Mate 9

Published 2018-04-11 · Updated 2018-05-24 · CVE-2018-7930

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 versions prior to MHA-L29B 8.0.0.366(C567)

Description: The issue is related to an information leak due to insufficient validation on data transfer requests in the Near Field Communication (NFC) module. When an affected mobile phone sends files to another device using the NFC function, an attacker can obtain arbitrary files, causing information leaks.

Recommendations: For versions prior to MHA-L29B 8.0.0.366(C567), update to version MHA-L29B 8.0.0.366(C567) or later to resolve the issue. As a temporary workaround, consider disabling the NFC function to minimize the risk of exploitation. Restrict access to sensitive files on the device to reduce the potential impact of the information leak.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-7930

Affected Products

Huawei Mate 9

References · 3

• https://osv.dev/vulnerability/CVE-2018-7930 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20180411-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7930 · Security Note