Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20151209-01-WORMHOLE
HistoryDec 09, 2015 - 12:00 a.m.

Security Advisory - Baidu WormHole Vulnerability in Huawei Mobile Phones

2015-12-0900:00:00
Huawei Technologies
www.huawei.com
11

Preinstalled Baidu apps in certain Huawei mobile phones have the WormHole vulnerability. An attacker can exploit this vulnerability to read information about, modify data in, or take control over the affected mobile phones. (Vulnerability ID: HWPSIRT-2015-10045)
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
<http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-465302.htm&gt;

Affected configurations

Vulners
Node
huaweip8_firmwareRange<GRA-TL00C01B220SP01
OR
huaweip8_firmwareRange<GRA-CL00C92B220
OR
huaweip8_firmwareRange<GRA-CL10C92B220
OR
huaweip8_firmwareRange<GRA-UL00C00B220
OR
huaweip8_firmwareRange<GRA-UL10C00B220
OR
huaweimate_s_firmwareRange<CRR-TL00C01B153SP01
OR
huaweimate_s_firmwareRange<CRR-UL00C00B153
OR
huaweimate_s_firmwareRange<CRR-CL00C92B153
VendorProductVersionCPE
huaweip8_firmware*cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*
huaweimate_s_firmware*cpe:2.3:a:huawei:mate_s_firmware:*:*:*:*:*:*:*:*