CVE-2017-2733

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the application can get the file that keep the cipher text of the SIM card PIN.

Score

CVSS 3.0 5.5 Medium

Status

Modified - psirt@huawei.com

Published

2017-11-22

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Honor 6x Firmware (Huawei)
• Honor 6x (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-02-smartphone-en
• http://www.securityfocus.com/bid/97700