Lucene search

[email protected]NVD:CVE-2017-17159

HistoryFeb 15, 2018 - 4:29 p.m.

CVE-2017-17159

2018-02-1516:29:01

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

28.0%

JSON

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.

Affected configurations

Nvd

Node

huaweimt8-emui4.1_firmwareMatchnxt-al10c00b386

huaweimt8-emui4.1_firmwareMatchnxt-cl00c92b386

huaweimt8-emui4.1_firmwareMatchnxt-dl00c17b386

huaweimt8-emui4.1_firmwareMatchnxt-tl00c01b386sp01

AND

huaweimt8-emui4.1Match-

Node

huaweints-al00_firmwareMatchnts-al00c00b535

AND

huaweints-al00Match-

VendorProductVersionCPE
huaweimt8-emui4.1_firmwarenxt-al10c00b386cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-al10c00b386:*:*:*:*:*:*:*
huaweimt8-emui4.1_firmwarenxt-cl00c92b386cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-cl00c92b386:*:*:*:*:*:*:*
huaweimt8-emui4.1_firmwarenxt-dl00c17b386cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-dl00c17b386:*:*:*:*:*:*:*
huaweimt8-emui4.1_firmwarenxt-tl00c01b386sp01cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-tl00c01b386sp01:*:*:*:*:*:*:*
huaweimt8-emui4.1-cpe:2.3:h:huawei:mt8-emui4.1:-:*:*:*:*:*:*:*
huaweints-al00_firmwarents-al00c00b535cpe:2.3:o:huawei:nts-al00_firmware:nts-al00c00b535:*:*:*:*:*:*:*
huaweints-al00-cpe:2.3:h:huawei:nts-al00:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	mt8-emui4.1_firmware	nxt-al10c00b386	cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-al10c00b386:::::::*
huawei	mt8-emui4.1_firmware	nxt-cl00c92b386	cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-cl00c92b386:::::::*
huawei	mt8-emui4.1_firmware	nxt-dl00c17b386	cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-dl00c17b386:::::::*
huawei	mt8-emui4.1_firmware	nxt-tl00c01b386sp01	cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-tl00c01b386sp01:::::::*
huawei	mt8-emui4.1	-	cpe:2.3:h:huawei:mt8-emui4.1:-:::::::*
huawei	nts-al00_firmware	nts-al00c00b535	cpe:2.3:o:huawei:nts-al00_firmware:nts-al00c00b535:::::::*
huawei	nts-al00	-	cpe:2.3:h:huawei:nts-al00:-:::::::*

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-smartphone-en

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

28.0%

JSON

Related for NVD:CVE-2017-17159

cvelist1 cve1 prion1 huawei1