CVE-2017-15340

Name of the Vulnerable Software and Affected Versions: Huawei smartphones version TAG-AL00C92B168

Description: The issue allows an attacker to trick a user into installing a crafted application. This application simulates a click action to back up data in a non-encrypted way using an Android assist function. Successful exploitation could result in information disclosure.

Recommendations: For Huawei smartphones version TAG-AL00C92B168, at the moment, there is no information about a newer version that contains a fix for this vulnerability.