Huawei P7-L10 MeWidget Information Disclosure Vulnerability

The P7-L10 is a smartphone from the Chinese company Huawei.MeWidget is one of the desktop customization tools. An information disclosure vulnerability exists in the MeWidget plugin in Huawei P7-L10 V100R001C00B136 and earlier versions. The vulnerability can be exploited by an attacker with the he...

Authentication flaw

The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted package...

CVE-2014-9135: Undefined Security Weakness

The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted package...

PT-2014-8842

Name of the Vulnerable Software and Affected Versions Huawei P7-L10 smartphones versions prior to V100R001C00B136 Description The issue concerns the PackageInstaller module, which can be exploited by remote attackers to spoof the origin website. This allows bypassing the website whitelist...