Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-17328

Опубликовано: 09 мар. 2018
Источник: nvd
CVSS3: 5.5
CVSS2: 7.1
EPSS Низкий

Описание

Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause information disclosure.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:mha-al00a_firmware:mha-al00ac00b125:*:*:*:*:*:*:*
cpe:2.3:h:huawei:mha-al00a:-:*:*:*:*:*:*:*

EPSS

Процентиль: 29%
0.00101
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 5.5
github
больше 3 лет назад

Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause information disclosure.

EPSS

Процентиль: 29%
0.00101
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-190