CVE-2018-7926

Severity: medium (CVSS 4.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-13 · updated 2026-06-17
Weakness: CWE-863

Description

Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to improper permission configuration for specific operations, an attacker who obtained the Huawei ID bound to the watch can bypass permission verification to perform specific operations and modify some data on the watch.

Affected products

Huawei Technologies Co., Ltd. Huawei Watch 2: through owdd.180707.001.e1

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-01-watch-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-01-watch-en

Get alerted when CVE-2018-7926 or the next vulnerability affects your stack