CVE-2014-9135

Published: Dec 19, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted package.

Affected (1)

Products: Huawei: P7 L10 Firmware

Huawei

1 product

P7 L10 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P7 L10 Firmware	Up to v100r001c00b135

Running on/with	Platform Versions
Huawei P7 L10	All versions

Related CWEs

CWE-264

References (4)

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-397472.htm

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/99283

Source: cve@mitre.org

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-397472.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/99283

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.