EUVD-2017-8315

Malware in sbrugna...

CVE-2017-17149: Undefined Security Weakness

Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successf...

PT-2018-6417

Name of the Vulnerable Software and Affected Versions: Huawei HiWallet App versions prior to 8.0.4 Description: The issue allows an attacker with root privilege to bypass Huawei ID verification during lock pattern change by performing a special operation. This can enable the attacker to change th...

CVE-2017-8177

Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking...