CVE-2017-17149

Description

Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the users Huawei ID during lock pattern change. An attacker with root privilege who gets a users smart phone may bypass Huawei ID verification by special operation. Successful exploit of this vulnerability can allow an attacker to change the lock pattern of HiWallet.

Risk Information

Base Score

3.9

MODERATE

Vector

CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.025

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-17149 ,CVE-2017-2704 are affected in hiwallet 8.0.0.301	NCM
CVE-2017-17149	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234