PT-2017-7317 · Huawei · Huawei P7

Published 2017-05-23 · Updated 2017-06-06 · CVE-2015-8089

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei P7 phones with software P7-L00 before P7-L00C17B851 Huawei P7 phones with software P7-L05 before P7-L05C00B851 Huawei P7 phones with software P7-L09 before P7-L09C92B851

Description The issue allows local users to read or write to arbitrary kernel memory locations, potentially causing a denial of service (system crash) or gaining privileges via a crafted application.

Recommendations For Huawei P7 phones with software P7-L00 before P7-L00C17B851, update to version P7-L00C17B851 or later. For Huawei P7 phones with software P7-L05 before P7-L05C00B851, update to version P7-L05C00B851 or later. For Huawei P7 phones with software P7-L09 before P7-L09C92B851, update to version P7-L09C92B851 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-8089

Affected Products

Huawei P7

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-8089 · Security Note
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460276.htm · Vendor Advisory