CVE-2017-2694

2017-11-2219:00:00

huawei

www.cve.org

AI Score

3.8

Confidence

High

EPSS

0.001

Percentile

21.8%

JSON

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.

CNA Affected

[
  {
    "product": "HwVmall",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Earlier than HwVmall 1.5.2.0 versions"
      }
    ]
  }
]