Description (CNA)
Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the application can get the file that keep the cipher text of the SIM card PIN.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Huawei Technologies Co., Ltd. / Honor 6X | affected Versions earlier than BLN-AL10C00B357, Versions earlier than BLN-AL20C00B357 |
CWE
No CWE identifiers supplied.
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-02-smartphone-en
- http://www.securityfocus.com/bid/97700
ADP enrichment
No English description supplied.