PT-2018-5799 · Huawei · Honor 9

Publicado 2018-02-15 · Atualizado 2018-02-26 · CVE-2017-15351

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Huawei Honor V9 play smartphones versions prior to Jimmy-AL00AC00B135

Description: The issue is related to an authentication bypass in the 'Find Phone' function due to improper authentication realization. This allows an attacker to bypass the 'Find Phone' function, enabling normal use of the phone.

Recommendations: For versions prior to Jimmy-AL00AC00B135, as a temporary workaround, consider disabling the 'Find Phone' function until a patch is available.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-15351

Produtos afetados

Honor 9

Referências · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-smartphone-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-15351 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-15351 · Nota de Segurança