Lucene search

K
nvd[email protected]NVD:CVE-2017-8150
HistoryNov 22, 2017 - 7:29 p.m.

CVE-2017-8150

2017-11-2219:29:03
CWE-119
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

31.6%

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause arbitrary memory writing in the next system reboot, causing continuous system reboot or arbitrary code execution.

Affected configurations

NVD
Node
huaweip10Match-
AND
huaweip10_firmwareRange<victoria-l09ac605b162
Node
huaweip10Match-
AND
huaweip10_firmwareRange<victoria-l29ac605b162
Node
huaweip10_plusMatch-
AND
huaweip10_plus_firmwareRange<vicky-l29ac605b162
Node
huaweip8_liteMatch-
AND
huaweip8_lite_firmwareRange<ale-l21c113b566
Node
huaweip9Match-
AND
huaweip9_firmwareRange<eva-l09c432b391
Node
huaweip9Match-
AND
huaweip9_firmwareRange<eva-l09c576b386
Node
huaweip9Match-
AND
huaweip9_firmwareRange<eva-l09c605b390
Node
huaweip9Match-
AND
huaweip9_firmwareRange<eva-l09c635b387
Node
huaweip9_firmwareRange<eva-l09c636b388
AND
huaweip9Match-
Node
huaweip9_firmwareRange<eva-l19c10b390
AND
huaweip9Match-
Node
huaweip9_firmwareRange<eva-l19c432b388
AND
huaweip9Match-
Node
huaweip9_firmwareRange<eva-l19c605b390
AND
huaweip9Match-
Node
huaweip9_firmwareRange<eva-l19c636b391
AND
huaweip9Match-

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

31.6%

Related for NVD:CVE-2017-8150