CVE-2017-17158

🗓️ 24 May 2018 14:00:00Reported by huaweiType

Some Huawei smart phones with versions before Berlin-L21HNC185B381, Prague-AL00AC00B223, Prague-AL00BC00B223, Prague-AL00CC00B223, Prague-L31C432B208, Prague-TL00AC01B223 have an information exposure vulnerability. Unauthenticated attacker may activate specific function by sending crafted messages during charging

Reporter	Title	Published	Views	Family All 6
CNVD	Information leakage vulnerability in multiple Huawei phones	11 Jul 201800:00	–	cnvd
Cvelist	CVE-2017-17158	24 May 201814:00	–	cvelist
EUVD	EUVD-2017-8324	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Information Exposure Vulnerability in Some Smart Phones	23 May 201800:00	–	huawei
NVD	CVE-2017-17158	24 May 201814:29	–	nvd
Prion	Input validation	24 May 201814:29	–	prion

NVD

Node

huawei berlin-l21hn_firmwareRange<l21hnc185b381

AND

huawei berlin-l21hnMatch-

Node

huawei prague-al00a_firmwareRange<al00ac00b223

AND

huawei prague-al00aMatch-

Node

huawei prague-al00b_firmwareRange<al00bc00b223

AND

huawei prague-al00bMatch-

Node

huawei prague-al00c_firmwareRange<al00cc00b223

AND

huawei prague-al00cMatch-

Node

huawei prague-l31_firmwareRange<l31c432b208

AND

huawei prague-l31Match-

Node

huawei prague-tl00a_firmwareRange<tl00ac01b223

AND

huawei prague-tl00aMatch-

Node

huawei prague-tl10a_firmwareRange<tl00ac01b223

AND

huawei prague-tl10aMatch-

[
  {
    "product": "Berlin-L21HN; Prague-AL00A; Prague-AL00B; Prague-AL00C; Prague-L31; Prague-TL00A; Prague-TL10A",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "The versions before Berlin-L21HNC185B381"
      },
      {
        "status": "affected",
        "version": "The versions before Prague-AL00AC00B223"
      },
      {
        "status": "affected",
        "version": "The versions before Prague-AL00BC00B223"
      },
      {
        "status": "affected",
        "version": "The versions before Prague-AL00CC00B223"
      },
      {
        "status": "affected",
        "version": "The versions before Prague-L31C432B208"
      },
      {
        "status": "affected",
        "version": "The versions before Prague-TL00AC01B223"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-phone-en

21 Nov 2024 03:17Current

4.7Medium risk

Vulners AI Score4.7

CVSS 22.1

CVSS 34.6

EPSS0.0003

CWE-20