Medium severity · published Jun 1, 2018
CVE-2017-17171
Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters
4.2
CVSS
0.5%
EPSS
No
On KEV
Description
Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M8
Mate 8 Firmware · Huawei
before nxt-al10c00b593; before nxt-cl00c92b593; before nxt-dl00c17b593; before nxt-l09c636b598a; before nxt-l09c185b583; before nxt-l09c432b582; +5 more · source: NVD
PF
P9 Firmware · Huawei
before eva-al00c00b398; before eva-al10c00b398; before eva-cl00c92b398; before eva-dl00c17b398; before eva-l09c185b391; before eva-l09c432b395; +9 more · source: NVD
PP
P9 Plus Firmware · Huawei
before vie-l09c318b182; before vie-l09c432b380; before vie-l09c576b180; before vie-l29c605b370; before vie-l29c636b388 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-17171
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-17171
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone-en
More from Mate 8 Firmware
8.8
CVE-2016-5230
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission…
7.8
CVE-2016-5231
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission…
7.8
CVE-2016-3681
Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182…
7.8
CVE-2016-3680
Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182…
7.1
CVE-2016-8794
Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S…