Security Advisory - UE Measurement Leak Vulnerability in Huawei P8 Phones

An information leak vulnerability exists in Huawei P8 Phones. Before sending a specific signal to a base station, the P8 Phone does not check its own security status. An attacker uses a fake base station to construct a specific scenario and obtain the specific signal which includes user equipment (UE) measurements of the signal strengths. (Vulnerability ID: HWPSIRT-2015-07035)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-8224.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
<http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-459832.htm&gt;