Information Leak Vulnerability in Huawei Enjoy 5s and Y6 Pro Smartphones

CVE-2017-17140 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an information leak vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious application on the smart phone and the application can read some sensitive information in kernel memory which may cause sensitive information leak.

Learn more about our User Device Pen Test.