CVE-2018-7956

MÉDIO 5.3CVE-2018-7956 · Published 04/12/2018 · updated 17/06/2026

Em resumo

CVE-2018-7956 é uma vulnerabilidade MÉDIO (CVSS 5.3) que afeta vip app (huawei).
Chance de exploração nos próximos 30 dias (EPSS): 0.76%, maior que 55.4% das vulnerabilidades.
Correção: atualize para 4.0.5 ou posterior.

Package	Affected versions	Patched versions
vip app huawei	`< 4.0.5`	`4.0.5`

Description

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.

References

huawei.com/en/psirt/security-advisories/huawei-sa-20181129-01-huaweivip-en · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free