Vulnerability Details CVE-2017-2735
TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user into installing a malicious application to call the interface and modify the system properties.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.5%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 5.8
References
Products affected by CVE-2017-2735
-
cpe:2.3:h:huawei:y6_pro:-
-
cpe:2.3:o:huawei:y6_pro_firmware:-
-
cpe:2.3:o:huawei:y6_pro_firmware:9.1.0.248(c636e5r3p1)