5.5
CVE-2017-17307
- EPSS 0.08%
- Veröffentlicht 20.03.2018 15:29:00
- Zuletzt bearbeitet 21.11.2024 03:17:48
- Quelle psirt@huawei.com
- CVE-Watchlists
- Unerledigt
LoginSome Huawei Smartphones with software of VNS-L21AUTC555B141 have an out-of-bounds read vulnerability. Due to the lack string terminator of string, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds and possibly cause the device abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Vns-l21 Firmware Versionvns-l21autc555b141
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.2 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.