Insufficient Input Validation Vulnerability in Huawei Mobile Phones

CVE-2017-8175 · HIGH Severity

AV:N/AC:M/AU:N/C:N/I:N/A:C

The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.

Learn more about our Mobile App Penetration Testing.