CVE-2018-7901

Name of the Vulnerable Software and Affected Versions: Huawei ALP-AL00B smart phones versions prior to 8.0.0.129 Huawei BLA-AL00B smart phones versions prior to 8.0.0.129

Description: The issue concerns a remote control vulnerability in the RCS module. An attacker can trick a user into installing a malicious application, which requires the user to manually agree to its connection with RCS. The attacker must also obtain the authentication key used by RCS. Successful exploitation may allow the attacker to remotely control the keyboard.

Recommendations: For Huawei ALP-AL00B smart phones versions prior to 8.0.0.129, update to version 8.0.0.129 or later. For Huawei BLA-AL00B smart phones versions prior to 8.0.0.129, update to version 8.0.0.129 or later.