Huawei Files vulnerabilities

2 CVEs affecting Huawei Files, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-2723, published 2017-11-22.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-2715, published 2017-11-22. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized…
• CVE-2017-2723, published 2017-11-22. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system…