Vulnerability Details CVE-2018-7957
Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.1%
CVSS Severity
CVSS v3 Score 3.3
CVSS v2 Score 2.1
References
Products affected by CVE-2018-7957
-
cpe:2.3:h:huawei:victoria-al00:-
-
cpe:2.3:o:huawei:victoria-al00_firmware:victoria-al00_8.0.0.336a(c00)