CVE-2018-7939

N/A

Published: September 12, 2018 at 03:00 PM UTC

Updated: June 17, 2026 at 02:03 AM UTC

8 products affected across 1 vendorHonor 6X FirmwareHonor 8 FirmwareHonor 5A

Using G9 Lite, Honor 5A, Honor 6X, Honor 8 by Huawei Technologies Co., Ltd.?

Get instant alerts when new vulnerabilities affect G9 Lite, Honor 5A, Honor 6X, Honor 8 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before CAM-L21C10B145, the versions before CAM-L21C185B156, the versions before CAM-L21C223B133, the versions before CAM-L21C432B210, the versions before CAM-L21C464B170, the versions before CAM-L21C636B245, the versions before Berlin-L21C10B372, the versions before Berlin-L21C185B363, the versions before Berlin-L21C464B137, the versions before Berlin-L23C605B161, the versions before FRD-L09C10B387, the versions before FRD-L09C185B387, the versions before FRD-L09C432B398, the versions before FRD-L09C636B387, the versions before FRD-L19C10B387, the versions before FRD-L19C432B399, the versions before FRD-L19C636B387 have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can disable the boot wizard by enable the talkback function. As a result, the FRP function is bypassed.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

G9 Lite Firmware · Huawei

95%

v < vns-l53c605b120custc605d103

Affected range stops below vns-l53c605b120custc605d103, so it looks safe — our inference, not a vendor statement

huawei-g9-lite (same device)

Honor 5A · Huawei

95%

Affected range stops below cam-l21c464b170, so it looks safe — our inference, not a vendor statement

Honor 5A Firmware · Huawei

95%

v < cam-l03c605b143custc605d008v < cam-l21c10b145v < cam-l21c185b156v < cam-l21c223b133v < cam-l21c432b210v < cam-l21c636b245

Affected range stops below cam-l03c605b143custc605d008, so it looks safe — our inference, not a vendor statement

Affected range stops below cam-l21c10b145, so it looks safe — our inference, not a vendor statement

Affected range stops below cam-l21c185b156, so it looks safe — our inference, not a vendor statement

Affected range stops below cam-l21c223b133, so it looks safe — our inference, not a vendor statement

Affected range stops below cam-l21c432b210, so it looks safe — our inference, not a vendor statement

Affected range stops below cam-l21c636b245, so it looks safe — our inference, not a vendor statement

huawei-honor-5a (same device)

Honor 6X Firmware · Huawei

95%

v < berlin-l21c10b372v < berlin-l21c185b363v < berlin-l21c464b137v < berlin-l23c605b161

Affected range stops below berlin-l21c10b372, so it looks safe — our inference, not a vendor statement

Affected range stops below berlin-l21c185b363, so it looks safe — our inference, not a vendor statement

Affected range stops below berlin-l21c464b137, so it looks safe — our inference, not a vendor statement

Affected range stops below berlin-l23c605b161, so it looks safe — our inference, not a vendor statement

huawei-honor-6x (same device)

Honor 8 Firmware · Huawei

95%

v < frd-l09c10b387v < frd-l09c185b387v < frd-l09c432b398v < frd-l09c636b387v < frd-l19c10b387v < frd-l19c432b399v < frd-l19c636b387

Affected range stops below frd-l09c10b387, so it looks safe — our inference, not a vendor statement

Affected range stops below frd-l09c185b387, so it looks safe — our inference, not a vendor statement

Affected range stops below frd-l09c432b398, so it looks safe — our inference, not a vendor statement

Affected range stops below frd-l09c636b387, so it looks safe — our inference, not a vendor statement

Affected range stops below frd-l19c10b387, so it looks safe — our inference, not a vendor statement

Affected range stops below frd-l19c432b399, so it looks safe — our inference, not a vendor statement

Affected range stops below frd-l19c636b387, so it looks safe — our inference, not a vendor statement

huawei-honor-8 (same device)

G9 Lite · Huawei

60%

Honor 6X · Huawei

60%

Honor 8 · Huawei

60%

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180905-01-frpbypass-en

References (1)

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180905-01-frpbypass-en

CVSS

4.9MEDIUM[email protected]

Confidentiality: NONE
Integrity: COMPLETE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card