PT-2016-5804 · Huawei · Huawei Hilink App

Akshay Jain · Published 2016-06-13 · Updated 2016-11-28 · CVE-2016-4005

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Huawei Hilink App version prior to 3.19.2

Description The issue concerns the Huawei Hilink App's failure to validate SSL certificates, allowing local users to have an unspecified impact.

Recommendations For versions prior to 3.19.2, update to version 3.19.2 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2016-4005

Affected Products

Huawei Hilink App

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-4005 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-wear-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4005 · Vendor Advisory
• http://securityfocus.com/bid/86536 · Note