CVE-2018-7956: Huawei Mate 20 Firmware

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.

Affected products

• Huawei Mate 20 Firmware: affected versions not specified
• Huawei Nova 3 Firmware: affected versions not specified
• Huawei Nova 3i Firmware: affected versions not specified
• Huawei Vip App: before 4.0.5 (fixed in 4.0.5)

Published 2018-12-04. Last modified 2026-06-17.