CVE-2018-7956

2018-12-0418:00:00

huawei

www.cve.org

0.001 Low

EPSS

Percentile

35.9%

JSON

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.

CNA Affected

[
  {
    "product": "Huawei VIP App",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "versions before 4.0.5"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20181129-01-huaweivip-en

0.001 Low

EPSS

Percentile

35.9%

JSON

Related for CVELIST:CVE-2018-7956