PT-2016-5652 · Huawei · Huawei Wear App

Akshay Jain

·

Publicado

2016-06-13

·

Atualizado

2016-11-28

·

CVE-2016-3677

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Huawei Wear App version prior to 15.0.0.307
Description The issue concerns the Huawei Wear App's failure to validate SSL certificates, allowing local users to have an unspecified impact.
Recommendations For versions prior to 15.0.0.307, update to version 15.0.0.307 or later to resolve the issue.

Correção

Insufficient Verification of Data Authenticity

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-254CWE-345

Identificadores relacionados

CVE-2016-3677

Produtos afetados

Huawei Wear App