Code injection

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

JSON

The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.

CPENameOperatorVersion
mha-al00aeq< mha-al0bc0b231

CPE	Name	Operator	Version
	mha-al00a	eq	< mha-al0bc0b231

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171018-01-dos-en