Information disclosure

2020-01-0917:15:00

PRIOn knowledge base

www.prio-n.com

4.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175(C00E59R2P11) have an information leak vulnerability. Due to a module using weak encryption tool, an attacker with the root permission may exploit the vulnerability to obtain some information.

CPENameOperatorVersion
honor_magic2_firmwareeq< 10.0.0.175c0e59r2p11

CPE	Name	Operator	Version
	honor_magic2_firmware	eq	< 10.0.0.175c0e59r2p11

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-phone-en