Medium severity · published Sep 12, 2018
CVE-2018-7906
Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability
5.5
CVSS
0.6%
EPSS
No
On KEV
Description
Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until restarting the phone.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LL
Leland-AL00, Leland-AL00A · Huawei Technologies Co., Ltd.
Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) · source: vendor
LF
Leland-al00 Firmware · Huawei
8.0.0.114(c636) · source: NVD
LF
Lleland-al00a Firmware · Huawei
8.0.0.171(c00) · source: NVD
Affected product
LL
Leland-AL00, Leland-AL00A
Huawei Technologies Co., Ltd.