CVE-2017-2694

EPSS 0.07%
Veröffentlicht 22.11.2017 19:29:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle psirt@huawei.com
CVE-Watchlists
Login
Unerledigt
Login

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Huawei ≫ Vmall Version < 1.5.2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.07%	0.185

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	3.3	1.8	1.4	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en

Vendor Advisory

http://www.securityfocus.com/bid/95915

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-2694

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-2694

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-2694

EUVD