CVE-2017-2715
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-2715
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to information leak.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Huawei Files APP 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei Files APP是中国华为（Huawei）公司的一款文件管理应用程序。 Huawei Files APP 7.1.1.309及之前的版本中安全漏洞，该漏洞源于保密柜密钥数据库设计不当。攻击者可利用该漏洞破解保密柜的口令信息，获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Huawei Technologies Co., Ltd. | Files £¨Files is the smartphone APP£© | 7.1.1.309 and earlier versions | - |
II. Public POCs for CVE-2017-2715
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-2715
Please Login to view more intelligence information
Same Patch Batch · Huawei Technologies Co., Ltd. · 2017-11-22 · 144 CVEs total
| CVE-2017-8159 | 多款Huawei产品安全漏洞 | |
| CVE-2017-8179 | Huawei Nice-AL00 MTK平台camera驱动程序缓冲区错误漏洞 | |
| CVE-2017-8178 | Huawei Vicky-AL00 Email应用程序跨站脚本漏洞 | |
| CVE-2017-8177 | Huawei HiWallet 安全漏洞 | |
| CVE-2017-8175 | Huawei Vicky-AL00A、Victoria-AL00A和Warsaw-AL00 Bastet 输入验证漏洞 | |
| CVE-2017-8174 | Huawei USG6300和USG6600 安全漏洞 | |
| CVE-2017-8173 | 多款Huawei产品安全漏洞 | |
| CVE-2017-8172 | Huawei P10和P10 Plus 安全漏洞 | |
| CVE-2017-8171 | Huawei Vicky-AL00 安全漏洞 | |
| CVE-2017-8170 | Huawei VIE-L09 缓冲区错误漏洞 | |
| CVE-2017-8169 | Huawei VIE-L09 缓冲区错误漏洞 | |
| CVE-2017-8168 | Huawei FusionSphere OpenStack 信息泄露漏洞 | |
| CVE-2017-8167 | Huawei USG9500 安全漏洞 | |
| CVE-2017-8166 | Huawei Honor V9 安全漏洞 | |
| CVE-2017-8163 | 多款Huawei产品安全漏洞 | |
| CVE-2017-8162 | 多款Huawei产品安全漏洞 | |
| CVE-2017-8161 | Huawei EVA-L09 安全漏洞 | |
| CVE-2017-8160 | 多款Huawei产品Madapt驱动程序安全漏洞 | |
| CVE-2017-8147 | 多款Huawei产品安全漏洞 | |
| CVE-2017-8145 | Huawei P10和P10 Plus通话模块安全漏洞 |
Showing top 20 of 144 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2017-2715
No comments yet