CVE-2017-2735: High severity huawei y6 pro vulnerability
TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user into installing a malicious application to call the interface and modify the system properties.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-2735?
CVE-2017-2735 is a vulnerability found in TIT-AL00 smartphones with software versions earlier than TIT-AL00C583B214.
What is the severity of CVE-2017-2735?
The severity of CVE-2017-2735 is high, with a CVSS severity value of 7.1.
How does CVE-2017-2735 affect Huawei Y6 Pro smartphones?
CVE-2017-2735 affects Huawei Y6 Pro smartphones with firmware versions earlier than TIT-AL00C583B214.
How can an attacker exploit CVE-2017-2735?
An attacker can exploit CVE-2017-2735 by tricking the user into calling an exposed system interface.
Are there any fixes available for CVE-2017-2735?
Yes, Huawei has released a security advisory (SA-20170329-01) addressing the vulnerability. Users should update their software to version TIT-AL00C583B214 or later.