CVE-2017-2733

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the application can get the file that keep the cipher text of the SIM card PIN.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Huawei Technologies Co., Ltd.	Honor 6X	Versions earlier than BLN-AL10C00B357, Versions earlier than BLN-AL20C00B357

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-02-smartphone-enVendor Advisory
http://www.securityfocus.com/bid/97700Third Party Advisory, VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-02-smartphone-enVendor Advisory
http://www.securityfocus.com/bid/97700Third Party Advisory, VDB Entry

Timeline

Published: Nov 22, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-27345.5P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. An attacker tricks CVE-2017-27357.1TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software prov CVE-2017-27367.2VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validatio CVE-2017-27378.8VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate t CVE-2017-27389.8VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implemen CVE-2017-27393.1The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can ta CVE-2017-27407.8A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, CVE-2017-27419.8A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. Thi CVE-2017-27427.5A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploit CVE-2017-27436.1HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterprise Color Printers a CVE-2017-27445.5The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1.CVE-2017-27456.1Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potent