Security Advisory - Insufficient Input Validation Vulnerability in Some Huawei Products

Some Huawei products have an insufficient input validation vulnerability. An unauthenticated attacker could send a forged air interface message to an affected product through a rogue base station. Due to insufficient input validation, the attacker could exploit this vulnerability to tamper with air interface signaling messages and obtain some communication information. (Vulnerability ID: HWPSIRT-2017-02057)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-2713.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en