CVE-2016-3677

EPSS 0.03%
Veröffentlicht 13.06.2016 14:59:05
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Hilink App Version-

Huawei ≫ Wear App Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.053

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-wear-en

Vendor Advisory

http://www.securityfocus.com/bid/86536

https://nvd.nist.gov/vuln/detail/CVE-2016-3677

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-3677

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-3677

EUVD