Sign-up

ID

VAR-201807-1846


CVE

CVE-2018-7934


TITLE

Huawei Vulnerability related to input confirmation in mobile phones

Trust: 0.8

sources: JVNDB: JVNDB-2018-008889

DESCRIPTION

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users make specific screen gestures. HuaweiMate10 is a smartphone from China's Huawei company. An attacker can entice a user to install a malicious application, causing the user to crash in the foreground application after making a specific screen gesture

Trust: 2.16

sources: NVD: CVE-2018-7934 // JVNDB: JVNDB-2018-008889 // CNVD: CNVD-2018-12788

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2018-12788

AFFECTED PRODUCTS

vendor:huaweimodel:mate 10 proscope:ltversion:bla-l29_8.0.0.145\(c432\)

Trust: 1.0

vendor:huaweimodel:mate 10 proscope:eqversion:bla-l29 8.0.0.145(c432)

Trust: 0.8

vendor:huaweimodel:mate pro <bla-l29 8.0.0.145scope:eqversion:10

Trust: 0.6

sources: CNVD: CNVD-2018-12788 // JVNDB: JVNDB-2018-008889 // NVD: CVE-2018-7934

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-7934
value: MEDIUM

Trust: 1.0

NVD: CVE-2018-7934
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2018-12788
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201807-2013
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2018-7934
severity: HIGH
baseScore: 7.1
vectorString: AV:N/AC:M/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2018-12788
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2018-7934
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2018-12788 // JVNDB: JVNDB-2018-008889 // CNNVD: CNNVD-201807-2013 // NVD: CVE-2018-7934

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2018-008889 // NVD: CVE-2018-7934

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201807-2013

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201807-2013

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-008889

PATCH
title:huawei-sa-20180705-01-smartphoneurl:https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180705-01-smartphone-en
Trust: 0.8
title:HuaweiMate10 denial of service vulnerability patchurl:https://www.cnvd.org.cn/patchInfo/show/133905
Trust: 0.6
title:Huawei Mate 10 Pro Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=82740
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2018-12788 // 
            
            
            
            JVNDB: JVNDB-2018-008889 // 
            
            
            
            CNNVD: CNNVD-201807-2013

EXTERNAL IDS
db:NVDid:CVE-2018-7934
Trust: 3.0
db:JVNDBid:JVNDB-2018-008889
Trust: 0.8
db:CNVDid:CNVD-2018-12788
Trust: 0.6
db:CNNVDid:CNNVD-201807-2013
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2018-12788 // 
            
            
            
            JVNDB: JVNDB-2018-008889 // 
            
            
            
            CNNVD: CNNVD-201807-2013 // 
            
            
            
            NVD: CVE-2018-7934

REFERENCES
url:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180705-01-smartphone-en
Trust: 1.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7934
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-7934
Trust: 0.8
url:https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20180705-01-smartphone-cn
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2018-12788 // 
            
            
            
            JVNDB: JVNDB-2018-008889 // 
            
            
            
            CNNVD: CNNVD-201807-2013 // 
            
            
            
            NVD: CVE-2018-7934

SOURCES
db:CNVDid:CNVD-2018-12788
db:JVNDBid:JVNDB-2018-008889
db:CNNVDid:CNNVD-201807-2013
db:NVDid:CVE-2018-7934

LAST UPDATE DATE
2024-11-23T22:34:09.233000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2018-12788date:2018-07-10T00:00:00
db:JVNDBid:JVNDB-2018-008889date:2018-10-31T00:00:00
db:CNNVDid:CNNVD-201807-2013date:2018-08-01T00:00:00
db:NVDid:CVE-2018-7934date:2024-11-21T04:12:59.017

SOURCES RELEASE DATE
db:CNVDid:CNVD-2018-12788date:2018-07-10T00:00:00
db:JVNDBid:JVNDB-2018-008889date:2018-10-31T00:00:00
db:CNNVDid:CNNVD-201807-2013date:2018-08-01T00:00:00
db:NVDid:CVE-2018-7934date:2018-07-31T14:29:00.950