CVE-2017-8151

Publication date

2017-11-22 19:00:00

Family

huawei

State

PUBLISHED

Description

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a users smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the password and fingerprint of the phone without authentication.