PT-2017-15489 · Huawei · Phone Finder

Published 2017-11-22 · Updated 2019-10-03 · CVE-2017-2702

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Phone Finder versions earlier than MHA-AL00C00B170

Description The issue allows an attacker to bypass the Phone Finder by taking special steps, which can result in the attacker obtaining the phone's owner information.

Recommendations For versions earlier than MHA-AL00C00B170, update to a version MHA-AL00C00B170 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-2702

Affected Products

Phone Finder

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2702 · Security Note
• https://osv.dev/vulnerability/CVE-2017-2702 · Vendor Advisory