CVE-2017-2715

Published: Nov 22, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to information leak.

Affected (1)

Products: Huawei: Files

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Files	Up to 7.1.1.309

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170425-01-files-en

Source: psirt@huawei.com

VDB Entry

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170425-01-files-en

Source: af854a3a-2127-422b-91ae-364da2661108

VDB Entry

Timeline

No history available yet.