CVE-2018-7940: Huawei Mate 9 Firmware

Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations.

Affected products

• Huawei Mate 9 Firmware: before 8.0.0.129\(sp2c00\) (fixed in 8.0.0.129\(sp2c00\))
• Huawei Mate 9 Pro Firmware: before 8.0.0.129\(sp2c01\) (fixed in 8.0.0.129\(sp2c01\))

Published 2018-05-10. Last modified 2026-06-17.