« Volver al listado

CVE-2014-8571

Estado: ModificadaBaja (3.3)—

Aplicaciones en teléfonos móviles Huawei Ascend P6 con software EDGE-U00 V100R001C17B508SP01 y versiones anteriores a V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 y versiones anteriores a V100R001C01B508SP02; EDGE-C00 V100R001C92B508SP02 y versiones anteriores a V100R001C92B508SP03 pueden capturar pantallas sin el permiso de root. Como resultado, la información del usuario puede ser filtrada por malware en teléfonos móviles Ascend P6.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Huawei — Ascend P6 Edge-c00 FirmwareHuawei — Ascend P6 Edge-t00 FirmwareHuawei — Ascend P6 Edge-u00 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-8571",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 3.3,
          "attackVector": "LOCAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@huawei.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "EDGE-U00,EDGE-T00,EDGE-C00 EDGE-U00 V100R001C17B508SP01 and earlier versions,V100R001C17B508SP02,EDGE-T00 V100R001C01B508SP01 and earlier versions,V100R001C01B508SP02,EDGE-C00 V100R001C92B508SP02 and earlier versions,V100R001C92B508SP03",
          "versions": [
            {
              "status": "affected",
              "version": "EDGE-U00,EDGE-T00,EDGE-C00 EDGE-U00 V100R001C17B508SP01 and earlier versions,V100R001C17B508SP02,EDGE-T00 V100R001C01B508SP01 and earlier versions,V100R001C01B508SP02,EDGE-C00 V100R001C92B508SP02 and earlier versions,V100R001C92B508SP03"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-04-02T20:59:00.377",
  "references": [
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/hw-372118",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@huawei.com"
    },
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/hw-372118",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 and earlier versions before V100R001C01B508SP02; EDGE-C00 V100R001C92B508SP02 and earlier versions before V100R001C92B508SP03 can capture screens without the root permission. As a result, user information can be leaked by malware on Ascend P6 mobile phones."
    },
    {
      "lang": "es",
      "value": "Aplicaciones en teléfonos móviles Huawei Ascend P6 con software EDGE-U00 V100R001C17B508SP01 y versiones anteriores a V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 y versiones anteriores a V100R001C01B508SP02; EDGE-C00 V100R001C92B508SP02 y versiones anteriores a V100R001C92B508SP03 pueden capturar pantallas sin el permiso de root. Como resultado, la información del usuario puede ser filtrada por malware en teléfonos móviles Ascend P6."
    }
  ],
  "lastModified": "2026-06-17T00:16:57.270",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:ascend_p6_edge-u00_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0805AD24-E603-4CDC-9277-6A6EE1277F84",
              "versionEndIncluding": "v100r001c17b508sp01"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:ascend_p6_edge-u00:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BA57D0EC-736C-4346-8570-4BDAA6E6A1C6"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:ascend_p6_edge-t00_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B898111-879C-44C5-AC94-4B8273A55119",
              "versionEndIncluding": "v100r001c01b508sp01"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:ascend_p6_edge-t00:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4B43CA15-4E80-42C3-9548-512F305A5C37"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:ascend_p6_edge-c00_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "867F1A1D-E06F-4EBB-BEAC-9111EEBDEBE4",
              "versionEndIncluding": "v100r001c92b508sp02"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:ascend_p6_edge-c00:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7591E2F7-8CE2-4AEB-B21F-BCCAB491DF13"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com"
}