CVE-2018-7911 is a medium-severity security vulnerability affecting certain Huawei smartphones. It involves a Factory Reset Protection (FRP) bypass issue, which allows an attacker to bypass the FRP function and potentially gain unauthorized access to the device. This vulnerability impacts specific firmware versions of Huawei smartphones, putting users at risk. To address this issue, Huawei has released software updates for the affected devices.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, you'll need to check if your Huawei smartphone has one of the specific firmware versions mentioned in the NVD page. This vulnerability allows an attacker to bypass the Factory Reset Protection (FRP) function, potentially gaining unauthorized access to your device. If your smartphone's firmware version is listed, it's at risk and you should take necessary precautions.

What should I do if I'm affected?

If you're affected by the vulnerability, follow these steps. First, identify your Huawei smartphone model and firmware version. next, visit Huawei's Security Advisory page to find the resolved product version. Then, update your device to the fixed software version. Finally, regularly check for updates to keep your device secure.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2018-7911 vulnerability, also known as the Factory Reset Protection (FRP) bypass security vulnerability, is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was added on October 23, 2018. There is no specific due date or required action mentioned, but it's recommended to follow Huawei's guidance for available solutions or mitigations.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as NVD-CWE-noinfo, or "Insufficient Information".

For more details

CVE-2018-7911, a medium-severity Factory Reset Protection bypass vulnerability, affects certain Huawei smartphones. Users should update their devices to the fixed software version to mitigate the risk. For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• NVD - CVE-2018-7911

• Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones