VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Dec 4, 2018· Updated Jun 17, 2026

CVE-2018-7956

CVE-2018-7956

Description

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Huawei/Vip App2 versions
    cpe:2.3:a:huawei:vip_app:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:huawei:vip_app:*:*:*:*:*:*:*:*range: <4.0.5
    • (no CPE)range: <4.0.5
  • Huawei/Mate 20 Firmware
    cpe:2.3:o:huawei:mate_20_firmware:-:*:*:*:*:*:*:*
  • Huawei/Nova 3 Firmware
    cpe:2.3:o:huawei:nova_3_firmware:-:*:*:*:*:*:*:*
  • Huawei/Nova 3i Firmware
    cpe:2.3:o:huawei:nova_3i_firmware:-:*:*:*:*:*:*:*
  • Huawei Technologies Co., Ltd./Huawei VIP Appv5
    Range: versions before 4.0.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.