CVE-2017-2733: Infoleak
Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the application can get the file that keep the cipher text of the SIM card PIN.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-2733?
CVE-2017-2733 is an information leak vulnerability in Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357.
How severe is CVE-2017-2733?
CVE-2017-2733 has a severity score of 5.5 (medium).
How does CVE-2017-2733 affect Huawei Honor 6X smartphones?
CVE-2017-2733 affects Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357.
How can an attacker exploit CVE-2017-2733?
An attacker can exploit CVE-2017-2733 by tricking a user into installing a malicious application on the smartphone.
What is the fix for CVE-2017-2733?
To fix CVE-2017-2733, users should update their Honor 6X smartphones to software versions BLN-AL10C00B357 or BLN-AL20C00B357.