deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-8171
Published: 2017-11-22
Description: Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Talkback mode and can perform some operations to bypass the Google account verification. As a result, the FRP function is bypassed.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-668
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-frpbypass-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-frpbypass-en
CVE: CVE-2017-8172
Published: 2017-11-22
Description: Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a out-of-bounds array access that results in smart phone restart.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170628-01-isub-en; http://www.securityfocus.com/bid/99370; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170628-01-isub-en
CVE: CVE-2017-8173
Published: 2017-11-22
Description: Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with software of earlier than Maya-L02C636B126 versions,earlier than VKY-L29C10B151 versions,earlier than VTR-L29C10B151 versions,earlier than Vicky-AL00AC00B162 versions,earlier than Victoria-AL00AC00B167 versions,earlier than Warsaw-AL00C00B200 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by some secret code and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
CVSS Score: 4.6 (MEDIUM)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170715-01-frpbypass-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170715-01-frpbypass-en
CVE: CVE-2017-8174
Published: 2017-11-22
Description: Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have a weak algorithm vulnerability. Attackers may exploit the weak algorithm vulnerability to crack the cipher text and cause confidential information leaks on the transmission links.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-usg-en
CVE: CVE-2017-8175
Published: 2017-11-22
Description: The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-02-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-02-smartphone-en
CVE: CVE-2017-8177
Published: 2017-11-22
Description: Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-app-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-app-en
CVE: CVE-2017-8178
Published: 2017-11-22
Description: Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting vulnerability. A remote attacker could exploit this vulnerability to send email that storing malicious code to a smartphone and waiting for a user to access this email that triggers execution of the code. An exploit could allow the attacker to execute arbitrary script code on the affected device.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170908-01-email-en; http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170908-01-email-en
CVE: CVE-2017-8179
Published: 2017-11-22
Description: The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en; http://www.securityfocus.com/bid/101956; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en
CVE: CVE-2017-8180
Published: 2017-11-22
Description: The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en
CVE: CVE-2017-8181
Published: 2017-11-22
Description: The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en
CVE: CVE-2017-8182
Published: 2017-11-22
Description: MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a out-of-bound read vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter and cause to memory out-of-bound read.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en
CVE: CVE-2017-8183
Published: 2017-11-22
Description: MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en
CVE: CVE-2017-8184
Published: 2017-11-22
Description: MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en
CVE: CVE-2017-8185
Published: 2017-11-22
Description: ME906s-158 earlier than ME906S_Installer_13.1805.10.3 versions has a privilege elevation vulnerability. An attacker could exploit this vulnerability to modify the configuration information containing malicious files and trick users into executing the files, resulting in the execution of arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-me906s-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-me906s-en
CVE: CVE-2017-8186
Published: 2017-11-22
Description: The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-dos-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-dos-en
CVE: CVE-2017-8188
Published: 2017-11-22
Description: FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en
CVE: CVE-2017-8189
Published: 2017-11-22
Description: FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-22
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en
CVE: CVE-2017-8190
Published: 2017-11-22
Description: FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability. The software does not verify the cryptographic signature. An attacker with high privilege may exploit this vulnerability to inject malicious software.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-347
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en
CVE: CVE-2017-8191
Published: 2017-11-22
Description: FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability. Attackers may exploit the vulnerability to crack the cipher text and cause information leak on the transmission links.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en; http://www.securityfocus.com/bid/102282; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-fusionsphere-en
CVE: CVE-2017-8192
Published: 2017-11-22
Description: FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-fustionsphere-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-fustionsphere-en
CVE: CVE-2017-8193
Published: 2017-11-22
Description: The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en
CVE: CVE-2017-8194
Published: 2017-11-22
Description: The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-02-OpenStack-en; http://www.securityfocus.com/bid/102209; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-02-OpenStack-en
CVE: CVE-2017-8195
Published: 2017-11-22
Description: The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability. Due to improper authentication on one port, an authenticated, remote attacker may exploit the vulnerability to execute more operations by send a crafted rest message.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170830-01-OpenStack-en
CVE: CVE-2017-8196
Published: 2017-11-22
Description: FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-863
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en
CVE: CVE-2017-8197
Published: 2017-11-22
Description: FusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device. Successful exploit could allow the attacker to launch a command injection attack and execute system commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en
CVE: CVE-2017-8198
Published: 2017-11-22
Description: FusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-fusionsphere-en
CVE: CVE-2017-8199
Published: 2017-11-22
Description: MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en; http://www.securityfocus.com/bid/101951; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en
CVE: CVE-2017-8200
Published: 2017-11-22
Description: MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause process reboot.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en; http://www.securityfocus.com/bid/101948; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en
CVE: CVE-2017-8201
Published: 2017-11-22
Description: MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit could cause a memory leak and eventual denial of service (DoS) condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en; http://www.securityfocus.com/bid/101952; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-h323-en
CVE: CVE-2017-8202
Published: 2017-11-22
Description: The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphone-en; http://www.securityfocus.com/bid/101959; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphone-en
CVE: CVE-2017-8203
Published: 2017-11-22
Description: The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en; http://www.securityfocus.com/bid/101960; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en
CVE: CVE-2017-8204
Published: 2017-11-22
Description: The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-01-smartphone-en; http://www.securityfocus.com/bid/101962; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-01-smartphone-en
CVE: CVE-2017-8205
Published: 2017-11-22
Description: The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-02-smartphone-en; http://www.securityfocus.com/bid/101963; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-02-smartphone-en
CVE: CVE-2017-8206
Published: 2017-11-22
Description: HONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone temporarily.
CVSS Score: 6.8 (MEDIUM)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170829-01-applock-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170829-01-applock-en
CVE: CVE-2017-8207
Published: 2017-11-22
Description: The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en
CVE: CVE-2017-8208
Published: 2017-11-22
Description: The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en
CVE: CVE-2017-8209
Published: 2017-11-22
Description: The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en
CVE: CVE-2017-8210
Published: 2017-11-22
Description: The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en