CVE-2018-7936

VendorhuaweiProductmate 10 pro firmwareDiscoveredSep 4, 2018UpdatedNov 21, 2024

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable the boot wizard. As a result, the FRP function is bypassed.

View graph Watch Export

CVSS v3.1

4.6 MEDIUM

EPSS

0.24%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Sep 23, 2026

● 0.00pp

0.24% → 0.24% over 9 tracked changes

CVSS v3.1 Detail

Attack VectorPHYSICAL

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityHIGH

AvailabilityNONE

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Connections

1 relationships

mate 10 pro firmware

source

Timeline

disclosure → media coverage

Sep 4, 2018

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024