Lucene search

Huawei TechnologiesHUAWEI-SA-20170725-01-SMARTPHONE

HistoryJul 25, 2017 - 12:00 a.m.

Security Advisory - Resource Exhaustion Vulnerability in Some Huawei Smartphones

2017-07-2500:00:00

Huawei Technologies

www.huawei.com

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.5%

JSON

Some Huawei smartphones have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery. (Vulnerability ID: HWPSIRT-2017-04120)
This vulnerability has been assigned a CVE ID: CVE-2017-8144.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-01-smartphone-en

Affected configurations

Vulners

Node

huaweihonor_5aMatchcam-l03c605b143custc605d003

huaweihonor_8Matchprague-l03c605b161

huaweihonor_8Matchprague-l23c605b160

huaweimate9Matchmha-al00c00b225

huaweimate9Matchlon-al00c00b225

huaweip10Matchvtr-al00c00b167

huaweip10Matchvtr-tl00c01b167

huaweip10_plusMatchvky-al00c00b167

huaweip10_plusMatchvky-tl00c01b167

CPENameOperatorVersion
honor 5aeqCAM-L03C605B143CUSTC605D003
honor 8 liteeqPrague-L03C605B161
honor 8 liteeqPrague-L23C605B160
mate9eqMHA-AL00C00B225
mate9 proeqLON-AL00C00B225
p10eqVTR-AL00C00B167
p10eqVTR-TL00C01B167
p10 pluseqVKY-AL00C00B167
p10 pluseqVKY-TL00C01B167

Name	Operator	Version
honor 5a	eq	CAM-L03C605B143CUSTC605D003
honor 8 lite	eq	Prague-L03C605B161
honor 8 lite	eq	Prague-L23C605B160
mate9	eq	MHA-AL00C00B225
mate9 pro	eq	LON-AL00C00B225
p10	eq	VTR-AL00C00B167
p10	eq	VTR-TL00C01B167
p10 plus	eq	VKY-AL00C00B167
p10 plus	eq	VKY-TL00C01B167

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.5%

JSON

Related for HUAWEI-SA-20170725-01-SMARTPHONE