PT-2017-6242 · Huawei · Huawei Ascend P6

Chen Jialin · Published 2017-04-02 · Updated 2017-04-05 · CVE-2014-8571

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei Ascend P6 mobile phones with software EDGE-U00 versions V100R001C17B508SP01 and earlier Huawei Ascend P6 mobile phones with software EDGE-T00 versions V100R001C01B508SP01 and earlier Huawei Ascend P6 mobile phones with software EDGE-C00 versions V100R001C92B508SP02 and earlier

Description The issue allows apps to capture screens without requiring root permission, potentially leading to user information leakage by malware.

Recommendations For EDGE-U00 versions V100R001C17B508SP01 and earlier, update to version V100R001C17B508SP02 or later. For EDGE-T00 versions V100R001C01B508SP01 and earlier, update to version V100R001C01B508SP02 or later. For EDGE-C00 versions V100R001C92B508SP02 and earlier, update to version V100R001C92B508SP03 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-8571

Affected Products

Huawei Ascend P6

References · 2

• http://huawei.com/en/psirt/security-advisories/hw-372118 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8571 · Security Note