CVE-2017-2733

CWE-200 — Information Exposure3 documents3 sources

Severity

5.5MEDIUM

EPSS

0.1%

top 74.13%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Honor 6X Firmware Huawei Technologies Co., Ltd. Honor 6X

Timeline

PublishedNov 22

Latest updateMay 17

Description

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the application can get the file that keep the cipher text of the SIM card PIN.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/honor_6x_firmware< bln-al10c00b357+1

▶CVEListV5huawei_technologies_co.,_ltd./honor_6xVersions earlier than BLN-AL10C00B357, Versions earlier than BLN-AL20C00B357

🔴Vulnerability Details

GHSA

GHSA-mw53-3g7g-86j9: Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerabil↗2022-05-17

▶

CVEList

CVE-2017-2733: Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerabil↗2017-11-22

▶