High severity · published Nov 22, 2017
CVE-2017-2729
The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a…
7.8
CVSS
1.3%
EPSS
No
On KEV
Description
The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
H5
Honor 5a Firmware · Huawei
before cam-tl00c01b193; before cam-tl00hc00b193; before cam-ul00c00b193 · source: NVD
PL
P8 Lite Firmware · Huawei
before ale-l02c635b568; before ale-l21c10b541; before ale-l21c185b568; before ale-l21c432b596; before ale-l21c464b595; before ale-l21c636b568; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-2729
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-2729
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170302-01-smartphone-en
Third Party Advisory
http://www.securityfocus.com/bid/96526
More from Honor 5a Firmware
5.5
CVE-2017-8144
Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the…
4.6
CVE-2018-7939
Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before…