PT-2017-7360 · Huawei · Huawei P8

Published 2017-09-20 · Updated 2017-09-23 · CVE-2015-8224

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei P8 versions before GRA-CL00C92B210 Huawei P8 versions before GRA-L09C432B200 Huawei P8 versions before GRA-TL00C01B210 Huawei P8 versions before GRA-UL00C00B210

Description The issue allows remote attackers to obtain user equipment measurements of signal strengths.

Recommendations For Huawei P8 versions before GRA-CL00C92B210, update to a version after GRA-CL00C92B210. For Huawei P8 versions before GRA-L09C432B200, update to a version after GRA-L09C432B200. For Huawei P8 versions before GRA-TL00C01B210, update to a version after GRA-TL00C01B210. For Huawei P8 versions before GRA-UL00C00B210, update to a version after GRA-UL00C00B210.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-8224

Affected Products

Huawei P8

References · 2

• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-459832.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8224 · Security Note