ZeroHour

CVE-2017-17140

CVSS 3.0
5.5 medium
EPSS
<1%p49
Published
()
Modified
Description

Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an information leak vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious application on the smart phone and the application can read some sensitive information in kernel memory which may cause sensitive information leak.

Vendors
huawei
Products
enjoy 5s firmware, y6 pro firmware
Weakness
CWE-200
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.