deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-2461
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service (resource consumption) via a crafted text message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-400
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2462
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; http://zerodayinitiative.com/advisories/ZDI-17-189/
CVE: CVE-2017-2463
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97176; http://www.securitytracker.com/id/1038157; http://zerodayinitiative.com/advisories/ZDI-17-241/
CVE: CVE-2017-2464
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2465
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2466
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://bugs.chromium.org/p/project-zero/issues/detail?id=1097
CVE: CVE-2017-2467
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2468
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2469
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2470
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2471
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97133; http://www.securitytracker.com/id/1038137; https://bugs.chromium.org/p/project-zero/issues/detail?id=1105
CVE: CVE-2017-2472
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2473
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2474
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. An off-by-one error allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2475
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted use of frames on a web site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2476
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://bugs.chromium.org/p/project-zero/issues/detail?id=1114
CVE: CVE-2017-2477
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "libxslt" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97303; https://support.apple.com/HT207615; http://www.securityfocus.com/bid/97303
CVE: CVE-2017-2478
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2479
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97176; http://www.securitytracker.com/id/1038157; https://support.apple.com/HT207599
CVE: CVE-2017-2480
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97176; http://www.securitytracker.com/id/1038157; https://support.apple.com/HT207599
CVE: CVE-2017-2481
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; http://zerodayinitiative.com/advisories/ZDI-17-191/
CVE: CVE-2017-2482
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2483
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2484
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Phone" component. It allows attackers to trigger telephone calls to arbitrary numbers via a third-party app.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/97138; http://www.securitytracker.com/id/1038139; https://support.apple.com/HT207617
CVE: CVE-2017-2485
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Security" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted X.509 certificate file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97132; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2486
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-425
References: http://www.securityfocus.com/bid/97147; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207600
CVE: CVE-2017-2487
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2489
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97300; https://support.apple.com/HT207615; https://www.exploit-db.com/exploits/41798/
CVE: CVE-2017-2490
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97301; https://support.apple.com/HT207601; https://support.apple.com/HT207602
CVE: CVE-2017-6974
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2014-3221
Published: 2017-04-02
Description: Huawei Eudemon8000E firewall with software V200R001C01SPC800 and earlier versions allows users to log in to the device using Telnet or SSH. When an attacker sends to the device a mass of TCP packets with special structure, the logging process becomes slow and users may be unable to log in to the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.huawei.com/en/psirt/security-advisories/hw-325385; http://www.huawei.com/en/psirt/security-advisories/hw-325385
CVE: CVE-2014-3222
Published: 2017-04-02
Description: In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate privileges to access and set specific key resources.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.huawei.com/en/psirt/security-advisories/hw-329170; http://www.huawei.com/en/psirt/security-advisories/hw-329170
CVE: CVE-2014-3223
Published: 2017-04-02
Description: Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special packets. The vulnerability causes the restart of switches.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://www.huawei.com/en/psirt/security-advisories/hw-329625; http://www.huawei.com/en/psirt/security-advisories/hw-329625
CVE: CVE-2014-3224
Published: 2017-04-02
Description: Huawei Quidway S9700 V200R003C00SPC500, Quidway S9300 V200R003C00SPC500, Quidway S7700 V200R003C00SPC500, Quidway S6700 V200R003C00SPC300, Quidway S6300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300 enable attackers to launch DoS attacks by crafting and sending malformed packets to these vulnerable products.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.huawei.com/en/psirt/security-advisories/hw-333184; http://www.huawei.com/en/psirt/security-advisories/hw-333184
CVE: CVE-2014-4706
Published: 2017-04-02
Description: Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S2350 with software V200R003C00SPC300; S2750 with software V200R003C00SPC300; S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S5700 with software V200R001C00SPC300,V200R003C00SPC300; S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S7700 with software V200R001C00SPC300; S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S9300E with software V200R003C00SPC300,V200R003C00SPC500 allow attackers to keep sending malformed packets to cause a denial of service (DoS) attack, aka a heap overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/hw-343218; http://www.huawei.com/en/psirt/security-advisories/hw-343218
CVE: CVE-2014-4707
Published: 2017-04-02
Description: Huawei Campus S7700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9300 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300 allow unauthorized users to upgrade the bootrom or bootload software, bypass a Menu protection mechanism, conduct a Menu compromise attack, or bypass a Menu/upgrade protection mechanism.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/hw-334629; http://www.huawei.com/en/psirt/security-advisories/hw-334629
CVE: CVE-2014-8570
Published: 2017-04-02
Description: Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005; S9300E, S9303E, S9306E, S9312E with software V200R001; S9700, S9703, S9706, S9712 with software V200R002, V200R003, V200R005; S12708, S12712 with software V200R005; 5700HI, 5300HI with software V100R006, V200R001, V200R002, V200R003, V200R005; 5710EI, 5310EI with software V200R002, V200R003, V200R005; 5710HI, 5310HI with software V200R003, V200R005; 6700EI, 6300EI with software V200R005 could cause a leak of IP addresses of devices, related to unintended interface support for VRP MPLS LSP Ping.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/hw-372145; http://www.huawei.com/en/psirt/security-advisories/hw-372145
CVE: CVE-2014-8571
Published: 2017-04-02
Description: Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 and earlier versions before V100R001C01B508SP02; EDGE-C00 V100R001C92B508SP02 and earlier versions before V100R001C92B508SP03 can capture screens without the root permission. As a result, user information can be leaked by malware on Ascend P6 mobile phones.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://www.huawei.com/en/psirt/security-advisories/hw-372118; http://www.huawei.com/en/psirt/security-advisories/hw-372118
CVE: CVE-2014-8572
Published: 2017-04-02
Description: Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions; S7700, S9300, S9300E, S9700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions could allow remote attackers to send a special SSH packet to the VRP device to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/hw-373182; http://www.huawei.com/en/psirt/security-advisories/hw-373182
CVE: CVE-2014-9136
Published: 2017-04-02
Description: Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.huawei.com/en/psirt/security-advisories/hw-372186; http://www.huawei.com/en/psirt/security-advisories/hw-372186
CVE: CVE-2014-9137
Published: 2017-04-02
Description: Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.huawei.com/en/psirt/security-advisories/hw-372186; http://www.huawei.com/en/psirt/security-advisories/hw-372186
CVE: CVE-2014-9690
Published: 2017-04-02
Description: Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator (RNG) used in the supplier's solution is not random enough. As a result, brute force cracking the PIN code is easier. After an attacker cracks the PIN, the attacker can access the Internet via the cracked device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-332
References: http://www.huawei.com/en/psirt/security-advisories/hw-408091; http://www.huawei.com/en/psirt/security-advisories/hw-408091