Vulnerabilities > CVE-2017-15340 - Unspecified vulnerability in Huawei Tag-Al00 Firmware Tagal00C92B168

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
huawei

Summary

Huawei smartphones with software of TAG-AL00C92B168 have an information disclosure vulnerability. An attacker tricks the user to install a crafted application, this application simulate click action to back up data in a non-encrypted way using an Android assist function. Successful exploit could result in information disclosure.

Vulnerable Configurations

Part Description Count
OS
Huawei
1
Hardware
Huawei
1