PT-2017-15522 · Huawei · Tit-Al00

Publicado 2017-11-22 · Atualizado 2017-12-11 · CVE-2017-2735

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIT-AL00 smartphones with software versions earlier than TIT-AL00C583B214

Description The issue concerns an exposed system interface in the software, which is used for interaction with external applications. However, the software does not properly restrict access to this interface. As a result, an attacker could potentially trick a user into installing a malicious application that calls the interface, allowing the attacker to modify system properties.

Recommendations For TIT-AL00 smartphones with software versions earlier than TIT-AL00C583B214, update to a version TIT-AL00C583B214 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-749

Identificadores relacionados

CVE-2017-2735

Produtos afetados

Tit-Al00

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-2735 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-smartphone-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2735 · Nota de Segurança
• http://securityfocus.com/bid/97224 · Nota