NetSight
medium4.2

CVE-2017-17171

Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters.

Impact

Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.

Affected products

VendorProductAffected versions
HuaweiMate 8 Firmware
before nxt-al10c00b593
before nxt-cl00c92b593
before nxt-dl00c17b593
before nxt-l09c636b598a
before nxt-l09c185b583
before nxt-l09c432b582
HuaweiP9 Firmware
before eva-al00c00b398
before eva-al10c00b398
before eva-cl00c92b398
before eva-dl00c17b398
before eva-l09c185b391
before eva-l09c432b395
HuaweiP9 Plus Firmware
before vie-l09c318b182
before vie-l09c432b380
before vie-l09c576b180
before vie-l29c605b370
before vie-l29c636b388

Weakness classification

References