Vulnerability in Huawei Ascend P6 Edge-C00
CVE-2014-8571
Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 and earlier versions before V100R001C01B508SP02; EDGE-C00 V100R001C92B508SP02 and earlier versions before V100R001C92B508SP03 can capture screens without the root permission. As a result, user information can be leaked by malware on Ascend P6 mobile phones.
EPSS: 0.005 (37.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.
Affected products
- Huawei Ascend_p6_edge-c00
- Huawei Ascend_p6_edge-c00_firmware
- Huawei Ascend_p6_edge-t00
- Huawei Ascend_p6_edge-t00_firmware
- Huawei Ascend_p6_edge-u00
- Huawei Ascend_p6_edge-u00_firmware
- N/a Edge-u00,edge-t00,edge-c00 Edge-u00 V100r001c17b508sp01 And Earlier Versions,v100r001c17b508sp02,edge-t00 V100r001c01b508sp01 Versions,v100r001c01b508sp02,edge-c00 V100r001c92b508sp02 Versions,v100r001c92b508sp03 — versions EDGE-U00,EDGE-T00,EDGE-C00 EDGE-U00 V100R001C17B508SP01 and earlier versions,V100R001C17B508SP02,EDGE-T00 V100R001C01B508SP01 and earlier versions,V100R001C01B508SP02,EDGE-C00 V100R001C92B508SP02 and earlier versions,V100R001C92B508SP03
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2014-8571?
- CVE-2014-8571 is a low-severity vulnerability in Huawei Ascend P6 Edge-C00, classified under CWE-264. CVSS score: 3.3/10. Published 2017-04-02.
- How severe is CVE-2014-8571?
- Low severity. CVSS v3 base score is 3.3 out of 10.