CVE-2014-9135
The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted package.
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:p7-l10_firmware
References
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-397472.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99283
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-397472.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99283