Описание
Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message.
Уязвимые конфигурации
Конфигурация 1Версия до mha-al00ac00b125 (включая)
Одновременно
cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00036
Низкий
7.1 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-494
Связанные уязвимости
CVSS3: 7.1
github
больше 3 лет назад
Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message.
EPSS
Процентиль: 10%
0.00036
Низкий
7.1 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-494