Lucene search

[email protected]CVE-2016-8763

HistoryApr 02, 2017 - 8:59 p.m.

CVE-2016-8763

2017-04-0220:59:01

CWE-664

[email protected]

web.nvd.nist.gov

cve-2016-8763

trustzone driver

huawei

p9 lite

p8 lite

software vulnerability

system restart

privilege elevation

security issue

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to cause a system restart or privilege elevation.

Affected configurations

NVD

Node

huaweip9_firmwareMatch-

AND

huaweip9Match-

Node

huaweip9_lite_firmwareRange≤vns-l21c185b130

AND

huaweip9_liteMatch-

Node

huaweip8_lite_firmwareRange≤ale-l02c636b150

AND

huaweip8_liteMatch-

CPENameOperatorVersion
huawei:p9_firmwarehuawei p9 firmwareeq-

CPE	Name	Operator	Version
huawei:p9_firmware	huawei p9 firmware	eq	-

CNA Affected

[
  {
    "product": "P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and earlier versions,ALE-L02C636B150 and earlier versions",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and earlier versions,ALE-L02C636B150 and earlier versions"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en

www.securityfocus.com/bid/94509

Social References

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

Related for CVE-2016-8763

nvd1 prion1 cvelist1 huawei1