CVE-2017-17139

2017-12-0600:00:00

huawei

www.cve.org

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.1%

JSON

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.334(C00) have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and application can exploit the vulnerability to get kernel date which may cause sensitive information leak.

CNA Affected

[
  {
    "product": "Mate 9; Mate 9 Pro",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "The versions before MHA-AL00B 8.0.0.334(C00)"
      },
      {
        "status": "affected",
        "version": "The versions before LON-AL00B 8.0.0.334(C00)"
      }
    ]
  }
]