Vulnerability Details : CVE-2016-8768
Huawei Honor 6, Honor 6 Plus, Honor 7 phones with software versions earlier than 6.9.16 could allow attackers to disable the PXN defense mechanism by invoking related drive code to crash the system or escalate privilege.
Products affected by CVE-2016-8768
- cpe:2.3:o:huawei:honor_6_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:honor_6_plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:honor_7_firmware:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-8768
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-8768
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2016-8768
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-8768
-
http://www.securityfocus.com/bid/93885
Multiple Huawei Products CVE-2016-8768 Local Privilege EscalationThird Party Advisory;VDB Entry
-
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-01-pxn-en
Security Advisory - PXN Defense Mechanism Failure Vulnerability in Huawei Mobile PhonesVendor Advisory
Jump to