Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20171020-01-SYNAPTICS
HistoryOct 20, 2017 - 12:00 a.m.

Security Advisory - Information Disclosure Vulnerability in the Synaptics Touchscreen Driver

2017-10-2000:00:00
Huawei Technologies
www.huawei.com
7

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

30.4%

An information disclosure vulnerability in the Synaptics touchscreen driver. An attacker tricks a user into installing a malicious application on the smart phone, and it could enable to access data outside of its permission levels. And cause to the sensitive information leaks. (Vulnerability ID: HWPSIRT-2017-08186)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-0650.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171020-01-synaptics-en

Affected configurations

Vulners
Node
huaweiwarsaw-al00Range<CAM-AL00C00B220
OR
huaweifrd-l02Range<FRD-L02C432B394
OR
huaweifrd-l04Range<FRD-L04C567B388
OR
huaweifrd-l04Range<FRD-L04C605B131CUSTC605D004
OR
huaweifrd-l09Range<FRD-L09C432B394
OR
huaweifrd-l14Range<FRD-L14C567B388
OR
huaweifrd-l19Range<FRD-L19C432B398
OR
huaweiwarsaw-al00Range<NTS-AL00C00B539
OR
huaweivictoria-al00aRange<Victoria-AL00AC00B167D
OR
huaweiatomu-l29aRange<Victoria-L29BC636B162

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

30.4%

Related for HUAWEI-SA-20171020-01-SYNAPTICS