{"id":"CVE-2018-7947","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-7947","generatedAt":"2026-10-28T21:18:06.023Z","title":"Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability.","description":"Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones.","published":"2018-07-31T14:29:01.000Z","lastModified":"2026-06-17T02:04:00.000Z","status":"Modified","sourceIdentifier":"psirt@huawei.com","cvss":{"version":"3.0","score":3.9,"severity":"LOW","vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},"cwe":["CWE-287"],"affected":["huawei/emily-al00a firmware"],"epss":{"score":0.00236,"percentile":0.14496,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180720-01-mobile-en","tags":["Vendor Advisory"],"source":"psirt@huawei.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180720-01-mobile-en","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-7947","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}