PT-2014-8842 · Huawei · Huawei P7-L10

Publicado 2014-12-19 · Atualizado 2017-09-08 · CVE-2014-9135

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Huawei P7-L10 smartphones versions prior to V100R001C00B136

Description The issue concerns the PackageInstaller module, which can be exploited by remote attackers to spoof the origin website. This allows bypassing the website whitelist protection mechanism through a crafted package.

Recommendations For versions prior to V100R001C00B136, update to V100R001C00B136 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-9135

Produtos afetados

Huawei P7-L10

Referências · 3

• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-397472.htm · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99283 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9135 · Nota de Segurança