CVE-2017-15340

2018-02-1516:00:00

huawei

www.cve.org

AI Score

Confidence

High

EPSS

0.001

Percentile

29.0%

JSON

Huawei smartphones with software of TAG-AL00C92B168 have an information disclosure vulnerability. An attacker tricks the user to install a crafted application, this application simulate click action to back up data in a non-encrypted way using an Android assist function. Successful exploit could result in information disclosure.

CNA Affected

[
  {
    "product": "TAG-AL00",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "TAG-AL00C92B168"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-05-smartphone-en