CVE-2018-7928

MEDIUM 4.6CVE-2018-7928 · Published 09/10/2018 · updated 17/06/2026

In short

CVE-2018-7928 is a MEDIUM (CVSS 4.6) vulnerability affecting my cloud (westerndigital).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.0% of all vulnerabilities.
Fix: update to 8.1.2.303 or later.

Package	Affected versions	Patched versions
my cloud westerndigital	`< 8.1.2.303`	`8.1.2.303`

Description

There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1.2.303 installed on some Huawei smart phones. When re-configuring the mobile phone using the FRP function, an attacker can replace the old account with a new one through special steps by exploit this vulnerability. As a result, the FRP function is bypassed.

References

huawei.com/en/psirt/security-advisories/huawei-sa-20180930-01-mycloud-en · Vendor Advisory

More vulnerabilities in my cloud

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free