Medium severity · published Feb 15, 2018
CVE-2017-15345
Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot.
CVSS vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LF
Lon-l29d Firmware · Huawei
lon-l29dc721b186 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-15345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-15345
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en
More from Lon-l29d Firmware
5.5
CVE-2020-9239
Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than…