PT-2017-6242 · Huawei · Huawei Ascend P6

Chen Jialin · Publicado 2017-04-02 · Atualizado 2017-04-05 · CVE-2014-8571

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei Ascend P6 mobile phones with software EDGE-U00 versions V100R001C17B508SP01 and earlier Huawei Ascend P6 mobile phones with software EDGE-T00 versions V100R001C01B508SP01 and earlier Huawei Ascend P6 mobile phones with software EDGE-C00 versions V100R001C92B508SP02 and earlier

Description The issue allows apps to capture screens without requiring root permission, potentially leading to user information leakage by malware.

Recommendations For EDGE-U00 versions V100R001C17B508SP01 and earlier, update to version V100R001C17B508SP02 or later. For EDGE-T00 versions V100R001C01B508SP01 and earlier, update to version V100R001C01B508SP02 or later. For EDGE-C00 versions V100R001C92B508SP02 and earlier, update to version V100R001C92B508SP03 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-8571

Produtos afetados

Huawei Ascend P6

Referências · 2

• http://huawei.com/en/psirt/security-advisories/hw-372118 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-8571 · Nota de Segurança