Vulnerabilities > CVE-2017-15340 - Unspecified vulnerability in Huawei Tag-Al00 Firmware Tagal00C92B168

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
huawei

Summary

Huawei smartphones with software of TAG-AL00C92B168 have an information disclosure vulnerability. An attacker tricks the user to install a crafted application, this application simulate click action to back up data in a non-encrypted way using an Android assist function. Successful exploit could result in information disclosure.

Vulnerable Configurations

Part Description Count
OS
Huawei
1
Hardware
Huawei
1