6.3
CVE-2017-17171
- EPSS 0.47%
- Veröffentlicht 01.06.2018 14:29:00
- Zuletzt bearbeitet 21.11.2024 03:17:38
- Erkennungen
LoginSome Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Mate 8 Firmware Version < nxt-al10c00b593
Huawei ≫ Mate 8 Firmware Version < nxt-cl00c92b593
Huawei ≫ Mate 8 Firmware Version < nxt-dl00c17b593
Huawei ≫ Mate 8 Firmware Version < nxt-l09c636b598a
Huawei ≫ Mate 8 Firmware Version < nxt-l09c185b583
Huawei ≫ Mate 8 Firmware Version < nxt-l09c432b582
Huawei ≫ Mate 8 Firmware Version < nxt-l09c605b585custc605d590
Huawei ≫ Mate 8 Firmware Version < nxt-l29c10b583
Huawei ≫ Mate 8 Firmware Version < nxt-l29c185b585
Huawei ≫ Mate 8 Firmware Version < nxt-l29c636b594a
Huawei ≫ Mate 8 Firmware Version < nxtl00c01b593
Huawei ≫ P9 Firmware Version < eva-al00c00b398
Huawei ≫ P9 Firmware Version < eva-al10c00b398
Huawei ≫ P9 Firmware Version < eva-cl00c92b398
Huawei ≫ P9 Firmware Version < eva-dl00c17b398
Huawei ≫ P9 Firmware Version < eva-l09c185b391
Huawei ≫ P9 Firmware Version < eva-l09c432b395
Huawei ≫ P9 Firmware Version < eva-l09c464b383
Huawei ≫ P9 Firmware Version < eva-l09c605b392
Huawei ≫ P9 Firmware Version <= eva-l09c636b388
Huawei ≫ P9 Firmware Version < eva-l19c10b394
Huawei ≫ P9 Firmware Version < eva-l19c432b392
Huawei ≫ P9 Firmware Version < eva-l19c605b390
Huawei ≫ P9 Firmware Version < eva-l19c636b393
Huawei ≫ P9 Firmware Version < eva-l29c636b389
Huawei ≫ P9 Firmware Version < eva-tl00c01b398
Huawei ≫ P9 Plus Firmware Version < vie-l09c318b182
Huawei ≫ P9 Plus Firmware Version < vie-l09c432b380
Huawei ≫ P9 Plus Firmware Version < vie-l09c576b180
Huawei ≫ P9 Plus Firmware Version < vie-l29c605b370
Huawei ≫ P9 Plus Firmware Version < vie-l29c636b388
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.47% | 0.372 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.2 | 0.6 | 3.6 |
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
|
| NIST | 6.3 | 6.8 | 6.9 |
AV:N/AC:M/Au:S/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone-en