CVE-2017-17149
CVE-2017-17149
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
09 mar 2018Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successful exploit of this vulnerability can allow an attacker to change the lock pattern of HiWallet.
Produtos afetados
Huawei Technologies Co., Ltd. · Huawei HiWallet AppQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →