Information Leak Vulnerability in Huawei Mobile Phones
CVE-2017-17280

3.5LOW

Key Information:

Vendor
McAfee
Status
Lon-al00b
Vendor
CVE Published:
9 March 2018

Summary

The NFC (Near Field Communication) module in certain Huawei mobile phones is susceptible to an information leak vulnerability. An attacker must deceive a user into performing specific actions, followed by sending a meticulously crafted NFC message to exploit this flaw. A successful attack may lead to unauthorized exposure of sensitive information, posing significant risks to user privacy and security.

Affected Version(s)

LON-AL00B LON-AL00BC00

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.