{"id":"CVE-2018-7926","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-7926","generatedAt":"2026-10-29T03:58:08.288Z","title":"Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability.","description":"Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to improper permission configuration for specific operations, an attacker who obtained the Huawei ID bound to the watch can bypass permission verification to perform specific operations and modify some data on the watch.","published":"2018-11-13T19:29:00.000Z","lastModified":"2026-06-17T02:03:58.000Z","status":"Modified","sourceIdentifier":"psirt@huawei.com","cvss":{"version":"3.0","score":4.6,"severity":"MEDIUM","vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},"cwe":["CWE-863"],"affected":["huawei/watch 2 firmware"],"epss":{"score":0.00223,"percentile":0.12896,"date":"2026-10-28","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-01-watch-en","tags":["Vendor Advisory"],"source":"psirt@huawei.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-01-watch-en","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-7926","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}