Lucene search

HuaweiCVE-2016-8792

HistoryApr 02, 2017 - 8:59 p.m.

CVE-2016-8792

2017-04-0220:59:01

CWE-284

huawei

web.nvd.nist.gov

cve-2016-8792

huawei

mate 8

mate s

software vulnerability

security

nvd

privilege escalation

system crash

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

41.3%

JSON

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before CRR-TL00C01B368, Versions before CRR-UL00C00B368, Versions before CRR-UL20C00B368; and P8 phones with software Versions before GRA-TL00C01B366, Versions before GRA-CL00C92B366, Versions before GRA-CL10C92B366, Versions before GRA-UL00C00B366, Versions before GRA-UL10C00B366 allow attackers with graphic or Camera privilege to crash the system or escalate privilege.

Affected configurations

Nvd

Vulners

Node

huaweimate_s_firmwareMatch-

AND

huaweimate_sMatch-

Node

huaweimate_8_firmwareMatch-

AND

huaweimate_8Match-

Node

huaweip8_firmwareMatch-

AND

huaweip8Match-

VendorProductVersionCPE
huaweimate_s_firmware-cpe:2.3:o:huawei:mate_s_firmware:-:*:*:*:*:*:*:*
huaweimate_s-cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*
huaweimate_8_firmware-cpe:2.3:o:huawei:mate_8_firmware:-:*:*:*:*:*:*:*
huaweimate_8-cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*
huaweip8_firmware-cpe:2.3:o:huawei:p8_firmware:-:*:*:*:*:*:*:*
huaweip8-cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	mate_s_firmware	-	cpe:2.3:o:huawei:mate_s_firmware:-:::::::*
huawei	mate_s	-	cpe:2.3:h:huawei:mate_s:-:::::::*
huawei	mate_8_firmware	-	cpe:2.3:o:huawei:mate_8_firmware:-:::::::*
huawei	mate_8	-	cpe:2.3:h:huawei:mate_8:-:::::::*
huawei	p8_firmware	-	cpe:2.3:o:huawei:p8_firmware:-:::::::*
huawei	p8	-	cpe:2.3:h:huawei:p8:-:::::::*

CNA Affected

[
  {
    "product": "Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20161116-01-smartphone-en

www.securityfocus.com/bid/94404

Social References

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

41.3%

JSON

Related for CVE-2016-8792