Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20170802-01-BROADCASTING
HistoryAug 02, 2017 - 12:00 a.m.

Security Advisory - DoS Vulnerability in Some Huawei Smartphones

2017-08-0200:00:00
Huawei Technologies
www.huawei.com
16

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

23.4%

There is a denial of service (DoS) vulnerability in some Huawei Smartphones. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable. (Vulnerability ID: HWPSIRT-2017-05109)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-2701.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-broadcasting-en

Affected configurations

Vulners
Node
huaweimate_9_proMatchmha-al00ac00b125
CPENameOperatorVersion
mate 9eqMHA-AL00AC00B125

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

23.4%

Related for HUAWEI-SA-20170802-01-BROADCASTING