CVE-2017-15340: Huawei Tag-AL00 Firmware

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Huawei smartphones with software of TAG-AL00C92B168 have an information disclosure vulnerability. An attacker tricks the user to install a crafted application, this application simulate click action to back up data in a non-encrypted way using an Android assist function. Successful exploit could result in information disclosure.

Affected products

• Huawei Tag-AL00 Firmware: version tag-al00c92b168 only

Published 2018-02-15. Last modified 2026-06-17.