Input validation

2018-02-1516:29:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.2%

JSON

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.

CPENameOperatorVersion
mt8-emui4.1_firmwareeqnxt-al10c0b386
mt8-emui4.1_firmwareeqnxt-cl0c92b386
mt8-emui4.1_firmwareeqnxt-dl0c17b386
mt8-emui4.1_firmwareeqnxt-tl0c1b386sp1
nts-al00_firmwareeqnts-al0c0b535

Name	Operator	Version
mt8-emui4.1_firmware	eq	nxt-al10c0b386
mt8-emui4.1_firmware	eq	nxt-cl0c92b386
mt8-emui4.1_firmware	eq	nxt-dl0c17b386
mt8-emui4.1_firmware	eq	nxt-tl0c1b386sp1
nts-al00_firmware	eq	nts-al0c0b535