Vulnerability Description
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Alp-L09 Firmware | < 8.0.0.150\(c432\) |
| Huawei | Alp-L09 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180911-01-smartphVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180911-01-smartphVendor Advisory
FAQ
What is CVE-2018-7923?
CVE-2018-7923 is a vulnerability with a CVSS score of 7.8 (HIGH). Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has r...
How severe is CVE-2018-7923?
CVE-2018-7923 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7923?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Alp-L09 Firmware, Huawei Alp-L09.