This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy

Security Notice - Statement on " Certifi-gate: Front-Door Access to Pwning Millions of Androids " at the BlackHat Conference

  • Initial Release Date: Aug 11, 2015
  • Last Release Date: Aug 11, 2015


Huawei noticed that Ohad Bobrov and Avi Bashan from Check Point gave a presentation titled "Certifi-gate: Front-Door Access to Pwning Millions of Androids" at the BlackHat USA 2015 Conference on August 7 2015. They disclosed Certifi-gate vulnerability which exists in the remote support tool (mRSTs) architecture in Android phones. Huawei has started an investigation immediately after learning about the vulnerability.

The investigation is still ongoing. Huawei PSIRT will keep updating the SN and will give the related views as soon as possible. Please stay tuned.

2015-08-11 INITIAL

Huawei adheres to protecting the ultimate interests of users with best efforts and the principle of responsible disclosure and deal with product security issues through our response mechanism. Please report to Huawei PSIRT at psirt@huawei.com if you find any security vulnerability of Huawei products.