PT-2017-15522 · Huawei · Tit-Al00

Published 2017-11-22 · Updated 2017-12-11 · CVE-2017-2735

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions TIT-AL00 smartphones with software versions earlier than TIT-AL00C583B214

Description The issue concerns an exposed system interface in the software, which is used for interaction with external applications. However, the software does not properly restrict access to this interface. As a result, an attacker could potentially trick a user into installing a malicious application that calls the interface, allowing the attacker to modify system properties.

Recommendations For TIT-AL00 smartphones with software versions earlier than TIT-AL00C583B214, update to a version TIT-AL00C583B214 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-749

Related Identifiers

CVE-2017-2735

Affected Products

Tit-Al00

References · 4

• https://osv.dev/vulnerability/CVE-2017-2735 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2735 · Security Note
• http://securityfocus.com/bid/97224 · Note