CVE-2017-2733
Medium
Description
Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the application can get the file that keep the cipher text of the SIM card PIN.
SeverityMedium
CVSS5.5
Exploit probability—
ProductHuawei Honor 6x Firmware
PublishedNov 22, 2017
First seenNov 22, 2017
How to fix
Update
- huawei honor_6x_firmwarebln-al10c00b357, bln-al20c00b357 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei honor_6x_firmware | v < bln-al10c00b357, v < bln-al20c00b357 | bln-al10c00b357, bln-al20c00b357 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.