PT-2018-6407

CVE-2017-17139

·

Published

2018-03-05

·

Updated

2018-03-27

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 versions before MHA-AL00B 8.0.0.334(C00) Huawei Mate 9 pro versions before LON-AL00B 8.0.0.334(C00)
Description: The issue is related to an information leak vulnerability in the date service proxy implementation. An attacker can exploit this by tricking a user into installing a malicious application, which can then access kernel data, potentially leading to sensitive information leaks.
Recommendations: For Huawei Mate 9 versions before MHA-AL00B 8.0.0.334(C00), update to version MHA-AL00B 8.0.0.334(C00) or later. For Huawei Mate 9 pro versions before LON-AL00B 8.0.0.334(C00), update to version LON-AL00B 8.0.0.334(C00) or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾