CVE-2017-2728

CVE-2017-2728 affects some Huawei smartphones, notably Honor 6X Berlin-L22C636B150 and earlier, where Bluetooth unlock can be bypassed when the Smart Unlock feature is enabled. The root cause is a lack of validation of Bluetooth devices, allowing an attacker to impersonate the user’s Bluetooth de...

CVE-2017-8206

CVE-2017-8206 concerns Huawei/Honor 7 Lite devices. The vulnerability is described as an App Lock bypass in the Phone Manager’s App Lock feature for software versions earlier than NEM-L21C432B352, enabling an attacker to temporarily access apps on a target device. Affected product: HONOR 7 Lite (...

CVE-2017-2708

The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authentication of the 'Find Phone' function, an...

CVE-2017-2697

The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C185B141 and earlier versions has buffer...

CVE-2017-2702

Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the phone...

CVE-2017-2723

The CVE-2017-2723 entry concerns Huawei’s Files APP (versions 7.1.1.308 and earlier). The vulnerability is plaintext storage of users’ Safe passwords, exploitable by an attacker with root privileges on an Android system to forge the Safe and read plaintext passwords, resulting in information leak...

CVE-2017-8166

Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone...

CVE-2017-8204

The CVE-2017-8204 entry concerns the Bastet driver in Huawei Honor 9 smartphones (pre-STANFORD-AL10C00B175). The vulnerability is a buffer overflow caused by insufficient parameter validation in the Bastet driver, enabling arbitrary code execution when a user installs a malicious app with root pr...

CVE-2017-8152

CVE-2017-8152 affects Huawei Honor 5S devices running software before TAG-TL00C01B173. The FRP (Factory Reset Protection) bypass is due to an improper design that lets an attacker access the factory reset page without authorization by dialing a special code. According to the NVD metrics, the atta...

CVE-2017-8202

The CVE-2017-8202 issue affects Huawei smartphones with CameraISP driver prior to Prague-[builds listed in the description]. It is a buffer overflow caused by missing parameter validation in the CameraISP driver. An attacker tricks a user into installing a malicious app that sends a crafted param...

CVE-2017-8151

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the...

CVE-2017-2705

Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a phone activation bypass vulnerability. Successful...

CVE-2017-2703

Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before...

CVE-2017-2709

CVE-2017-2709 affects Huawei HiGame (pre-7.3.0) and SkyTone (pre-8.1.1) apps. The vulnerability stems from insufficient input validation in/core apps that process malformed packets, enabling a denial-of-service when a user installs a malicious application. Impact is DoS on affected devices; no in...

CVE-2017-2708

CVE-2017-2708 describes an authentication bypass in the Find Phone function of certain Huawei/Nice smartphones running versions earlier than Nice-AL00C00B0135. The underlying issue is missing authentication for the Find Phone feature, allowing an unauthenticated attacker to bypass the function an...

CVE-2017-2728

Some Huawei mobile phones Honor 6X Berlin-L22C636B150 and earlier versions have a Bluetooth unlock bypassing vulnerability. If a user has enabled the smart unlock function, an attacker can impersonate the user's Bluetooth device to unlock the user's mobile phone screen.uawei mobile phones have a...

CVE-2017-2727

Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a privilege escalation vulnerability. An...

CVE-2017-2703

Huawei Phone Finder bypass CVE-2017-2703 affects multiple Huawei smartphone models (e.g., MHA-AL00, MHA-CL00, MHA-DL00, MHA-TL00, EVA-AL10/CL10/DL10/TL10, EVA-DL10, etc.). The root cause is a bypass of the Phone Finder security feature, allowing an attacker to access System Settings via specific ...

Arbitrary Account Password Reset Vulnerability in Netxi Smart Android APP

Netxi Smart Android APP is a water purifier monitoring software. Netxi Smart Android APP has a reset any account password vulnerability, the attacker only need the other party's cell phone number to change their passwords, leak the user's sensitive information or loss of funds...

Security Advisory - Authentication Bypass Vulnerability in the 'Find Phone' Function of Some Huawei Smart Phones

There is an authentication bypass vulnerability in the 'Find Phone' function of some Huawei smart phone. Due to improper authentication realization in the 'Find Phone' function. An attacker may exploit the vulnerability to bypass the 'Find Phone' function in order to use the phone normally...