CVE-2017-17140
Medium
Description
Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an information leak vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious application on the smart phone and the application can read some sensitive information in kernel memory which may cause sensitive information leak.
SeverityMedium
CVSS5.5
Exploit probability—
ProductHuawei Enjoy 5s Firmware
PublishedMar 5, 2018
First seenMar 5, 2018
How to fix
Update
- huawei enjoy_5s_firmwaretag-al00c92b170 or later
- huawei y6_pro_firmwaretit-l01c576b121 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei enjoy_5s_firmware | v < tag-al00c92b170 | tag-al00c92b170 |
| huawei y6_pro_firmware | v < tit-l01c576b121 | tit-l01c576b121 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.