Privilege Escalation Vulnerability in Huawei Mate and P8 Mobile Phones
CVE-2016-8794

7.1HIGH

Key Information:

Vendor
Huawei
Status
Mate 8,mate S,p8 Versions Before Nxt-al10c00b386,versions Before Nxt-cl00c92b386,versions Before Nxt-dl00c17b386,versions Before Nxt-tl00c01b386,versions Before Crr-cl00c92b368,versions Before Crr-cl20c92b368,versions Before Crr-tl00c01b368,versions Before Crr-ul00c00b368,versions Before Crr-ul20c00b368,versions Before Gra-tl00c01b366,versions Before Gra-cl00c92b366,versions Before Gra-cl10c92b366,versions Before Gra-ul00c00b366,versions Before Gra-ul10c00b366
Vendor
CVE Published:
2 April 2017

Summary

Certain Huawei mobile phones, specifically the Mate 8, Mate S, and P8 models, are susceptible to a vulnerability that may allow attackers with graphic or Camera privileges to crash the system or escalate their privileges. This affects multiple software versions across these devices, leading to potential unauthorized access and control.

Affected Version(s)

Mate 8,Mate S,P8 before NXT-AL10C00B386, before NXT-CL00C92B386, before NXT-DL00C17B386, before NXT-TL00C01B386, before CRR-CL00C92B368, before CRR-CL20C92B368, before CRR-TL00C01B368, before CRR-UL00C00B368, before CRR-UL20C00B368, before GRA-TL00C01B366, before GRA-CL00C92B366, before GRA-CL10C92B366, before GRA-UL00C00B366, before GRA-UL10C00B366 Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/94404
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.