Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-7906

Опубликовано: 12 сент. 2018
Источник: nvd
CVSS3: 5.5
CVSS2: 7.1
EPSS Низкий

Описание

Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until restarting the phone.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:leland-al00_firmware:8.0.0.114\(c636\):*:*:*:*:*:*:*
cpe:2.3:h:huawei:leland-al00:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:huawei:lleland-al00a_firmware:8.0.0.171\(c00\):*:*:*:*:*:*:*
cpe:2.3:h:huawei:lleland-al00a:-:*:*:*:*:*:*:*

EPSS

Процентиль: 21%
0.00069
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.5
github
больше 3 лет назад

Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until restarting the phone.

EPSS

Процентиль: 21%
0.00069
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-20