Lucene search

MitreCVE-2016-6180

HistorySep 07, 2016 - 7:28 p.m.

CVE-2016-6180

2016-09-0719:28:04

CWE-284

mitre

web.nvd.nist.gov

huawei

honor 4c

smartphone

camera driver

denial of service

privilege escalation

cve-2016-6180

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

30.5%

JSON

The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6181, CVE-2016-6182, CVE-2016-6183, and CVE-2016-6184.

Affected configurations

Nvd

Node

huaweihonor_4c_firmwareMatchchm-tl00c01_b535

huaweihonor_4c_firmwareMatchchm-tl00c01b556

huaweihonor_4c_firmwareMatchchm-tl00hc00_b535

huaweihonor_4c_firmwareMatchchm-tl00hc00b556

huaweihonor_4c_firmwareMatchchm-ul00c00b535

huaweihonor_4c_firmwareMatchchm-ul00c00b556

AND

huaweihonor_4cMatch-

VendorProductVersionCPE
huaweihonor_4c_firmwarechm-tl00c01_b535cpe:2.3:o:huawei:honor_4c_firmware:chm-tl00c01_b535:*:*:*:*:*:*:*
huaweihonor_4c_firmwarechm-tl00c01b556cpe:2.3:o:huawei:honor_4c_firmware:chm-tl00c01b556:*:*:*:*:*:*:*
huaweihonor_4c_firmwarechm-tl00hc00_b535cpe:2.3:o:huawei:honor_4c_firmware:chm-tl00hc00_b535:*:*:*:*:*:*:*
huaweihonor_4c_firmwarechm-tl00hc00b556cpe:2.3:o:huawei:honor_4c_firmware:chm-tl00hc00b556:*:*:*:*:*:*:*
huaweihonor_4c_firmwarechm-ul00c00b535cpe:2.3:o:huawei:honor_4c_firmware:chm-ul00c00b535:*:*:*:*:*:*:*
huaweihonor_4c_firmwarechm-ul00c00b556cpe:2.3:o:huawei:honor_4c_firmware:chm-ul00c00b556:*:*:*:*:*:*:*
huaweihonor_4c-cpe:2.3:h:huawei:honor_4c:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	honor_4c_firmware	chm-tl00c01_b535	cpe:2.3:o:huawei:honor_4c_firmware:chm-tl00c01_b535:::::::*
huawei	honor_4c_firmware	chm-tl00c01b556	cpe:2.3:o:huawei:honor_4c_firmware:chm-tl00c01b556:::::::*
huawei	honor_4c_firmware	chm-tl00hc00_b535	cpe:2.3:o:huawei:honor_4c_firmware:chm-tl00hc00_b535:::::::*
huawei	honor_4c_firmware	chm-tl00hc00b556	cpe:2.3:o:huawei:honor_4c_firmware:chm-tl00hc00b556:::::::*
huawei	honor_4c_firmware	chm-ul00c00b535	cpe:2.3:o:huawei:honor_4c_firmware:chm-ul00c00b535:::::::*
huawei	honor_4c_firmware	chm-ul00c00b556	cpe:2.3:o:huawei:honor_4c_firmware:chm-ul00c00b556:::::::*
huawei	honor_4c	-	cpe:2.3:h:huawei:honor_4c:-:::::::*

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en

Social References

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

30.5%

JSON

Related for CVE-2016-6180