PT-2016-3882 · Huawei · Huawei Sophia-L10

Xiao Peng · Published 2016-04-07 · Updated 2016-04-14 · CVE-2015-8305

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei Sophia-L10 smartphones with software before P7-L10C900B852

Description The issue allows attackers to cause a denial of service, resulting in a system panic, by utilizing a crafted application that has either system or camera privilege.

Recommendations For Huawei Sophia-L10 smartphones with software before P7-L10C900B852, update the software to version P7-L10C900B852 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-8305

Affected Products

Huawei Sophia-L10

References · 2

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8305 · Security Note