CVE-2018-7926
CVE-2018-7926
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 Nov 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to improper permission configuration for specific operations, an attacker who obtained the Huawei ID bound to the watch can bypass permission verification to perform specific operations and modify some data on the watch.
Affected products
Huawei Technologies Co., Ltd. · Huawei Watch 2Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →