Description (CNA)
Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to exploit this vulnerability. Successful exploit may cause some information disclosure.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Huawei / Taurus-AL00B | affected Versions earlier than 10.0.0.205(C00E201R7P2) |
CWE
No CWE identifiers supplied.
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-smartphone-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-smartphone-en
ADP enrichment
No English description supplied.