PT-2017-7317 · Huawei · Huawei P7

Publicado 2017-05-23 · Atualizado 2017-06-06 · CVE-2015-8089

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei P7 phones with software P7-L00 before P7-L00C17B851 Huawei P7 phones with software P7-L05 before P7-L05C00B851 Huawei P7 phones with software P7-L09 before P7-L09C92B851

Description The issue allows local users to read or write to arbitrary kernel memory locations, potentially causing a denial of service (system crash) or gaining privileges via a crafted application.

Recommendations For Huawei P7 phones with software P7-L00 before P7-L00C17B851, update to version P7-L00C17B851 or later. For Huawei P7 phones with software P7-L05 before P7-L05C00B851, update to version P7-L05C00B851 or later. For Huawei P7 phones with software P7-L09 before P7-L09C92B851, update to version P7-L09C92B851 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-8089

Produtos afetados

Huawei P7

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-8089 · Nota de Segurança
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460276.htm · Aviso do Fabricante