Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-8169

Опубликовано: 22 нояб. 2017
Источник: nvd
CVSS3: 7.8
CVSS2: 9.3
EPSS Низкий

Описание

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:vie-l09_firmware:*:*:*:*:*:*:*:*
Версия до vie-l09c40b360 (исключая)
cpe:2.3:h:huawei:vie-l09:-:*:*:*:*:*:*:*

EPSS

Процентиль: 39%
0.00177
Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.8
github
больше 3 лет назад

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution.

EPSS

Процентиль: 39%
0.00177
Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-119