CVSS 3.0
4.6 mediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2018-7988
There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- CWE
- CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:mate_9_pro_firmware
- huawei:nova_2_plus_firmware