QwikSec

Security Database

CVE

CWE

Training

CVE-2017-2694

Published: Nov 22, 2017

Modified: Sep 17, 2024

PUBLISHED

Description

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.

Vendor	Product	Versions
Huawei Technologies Co., Ltd.	HwVmall	affected `Earlier than HwVmall 1.5.2.0 versions`

References

vdb-entry

x_refsource_BID

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.