CVE-2014-8571

Low

Description

Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 and earlier versions before V100R001C01B508SP02; EDGE-C00 V100R001C92B508SP02 and earlier versions before V100R001C92B508SP03 can capture screens without the root permission. As a result, user information can be leaked by malware on Ascend P6 mobile phones.

SeverityLow
CVSS3.3
Exploit probability—
ProductHuawei Ascend P6 Edge-u00 Firmware
PublishedApr 2, 2017
First seenApr 2, 2017

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
huawei ascend_p6_edge-u00_firmwarev ≤ v100r001c17b508sp01—
huawei ascend_p6_edge-t00_firmwarev ≤ v100r001c01b508sp01—
huawei ascend_p6_edge-c00_firmwarev ≤ v100r001c92b508sp02—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2014-8571 · Huawei Ascend P6 Edge-u00 Firmware · Dark Radar