CVE-2017-17327

EPSS 0.08%
Published 09.03.2018 17:29:02
Last modified 21.11.2024 03:17:50
Source psirt@huawei.com
Teams watchlist Login
Open Login

Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause certain service unavailable.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Huawei ≫ Mha-al00a Firmware Versionmha-al00ac00b125

Huawei ≫ Mha-al00a Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.2

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-03-smartphone-en

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-17327

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-17327

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-17327

EUVD