CVE-2017-17159

Опубликовано: 15 фев. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 6.1

EPSS Низкий

Описание

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.

Ссылки

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-smartphone-en
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-smartphone-en
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-al10c00b386:*:*:*:*:*:*:*

cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-cl00c92b386:*:*:*:*:*:*:*

cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-dl00c17b386:*:*:*:*:*:*:*

cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-tl00c01b386sp01:*:*:*:*:*:*:*

cpe:2.3:h:huawei:mt8-emui4.1:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:huawei:nts-al00_firmware:nts-al00c00b535:*:*:*:*:*:*:*

cpe:2.3:h:huawei:nts-al00:-:*:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.0003

Низкий

6.5 Medium

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-2r3x-2vg2-wg8v