Vulnerability in Huawei P7-L10
CVE-2014-9135
The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted package.
EPSS: 0.008 (52.4th percentile) — read the EPSS interpretation.
Affected products
- Huawei P7-l10
- Huawei P7-l10_firmware
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)