PT-2016-5652 · Huawei · Huawei Wear App

Akshay Jain · Published 2016-06-13 · Updated 2016-11-28 · CVE-2016-3677

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Huawei Wear App version prior to 15.0.0.307

Description The issue concerns the Huawei Wear App's failure to validate SSL certificates, allowing local users to have an unspecified impact.

Recommendations For versions prior to 15.0.0.307, update to version 15.0.0.307 or later to resolve the issue.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-254

CWE-345

Related Identifiers

CVE-2016-3677

Affected Products

Huawei Wear App

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-3677 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-wear-en · Vendor Advisory
• http://securityfocus.com/bid/86536 · Note