5 results (0.003 seconds)

CVSS: 3.6EPSS: 0%CPEs: 20EXPL: 0

CVE-2019-5252

https://notcve.org/view.php?id=CVE-2019-5252

There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant. Hay una vulnerabilidad de autenticación inapropiada en los teléfonos inteligentes Huawei (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). El componente applock no realiza una autenticación suficiente en una condición extraña. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-smartphone-en • CWE-287: Improper Authentication •

CVSS: 4.6EPSS: 0%CPEs: 50EXPL: 0

CVE-2019-5264

https://notcve.org/view.php?id=CVE-2019-5264

There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure. tiene una vulnerabilidad de divulgación de información en ciertos teléfonos inteligentes Huawei (Mate 10; Mate 10 Pro; Honor V10; Changxiang 7S; P-smart; Changxiang 8 Plus; Y9 2018; Honor 9 Lite; Honor 9i; Mate 9). El software no maneja apropiadamente cierta información de aplicaciones bloqueadas mediante applock en una condición extraña. La explotación con éxito podría causar una divulgación de información. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en •

CVSS: 5.5EPSS: 0%CPEs: 20EXPL: 0

CVE-2019-5251

https://notcve.org/view.php?id=CVE-2019-5251

There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information disclosure. Se presenta una vulnerabilidad de salto de ruta en varios teléfonos inteligentes Huawei. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-smartphone-en • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 4.3EPSS: 0%CPEs: 4EXPL: 0

CVE-2018-7946

https://notcve.org/view.php?id=CVE-2018-7946

There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due to improper design, successful exploit may cause some information leak. Hay una vulnerabilidad de fuga de información en algunos smartphones Huawei. Un atacante podría realizar algunas configuraciones específicas en el smartphone y engañar a un usuario para que introduzca información sensible. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181121-01-phone-en • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.1EPSS: 0%CPEs: 18EXPL: 0

CVE-2017-8144

https://notcve.org/view.php?id=CVE-2017-8144

Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery. Los smartphones Huawei Honor 5A, Honor 8 Lite, Mate9, Mate9 Pro, P10 y P10 Plus con software en versiones anteriores a la CAM-L03C605B143CUSTC605D003, la Prague-L03C605B161, la Prague-L23C605B160, la MHA-AL00C00B225, la LON-AL00C00B225, la VTR-AL00C00B167, la VTR-TL00C01B167, la VKY-AL00C00B167 y la VKY-TL00C01B167 tienen una vulnerabilidad de agotamiento de recursos debido a la configuración de las opciones. Un atacante engaña a un usuario para que instale una aplicación maliciosa; la aplicación podría encender la linterna del dispositivo y descargar rápidamente la batería. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-01-smartphone-en • CWE-920: Improper Restriction of Power Consumption •