← Back

CVE-2017-17158

nvd nist
Published: May 24, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.6
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 0.9 / Impact: 3.6
Source: NVD

Description

Some Huawei smart phones with the versions before Berlin-L21HNC185B381; the versions before Prague-AL00AC00B223; the versions before Prague-AL00BC00B223; the versions before Prague-AL00CC00B223; the versions before Prague-L31C432B208; the versions before Prague-TL00AC01B223; the versions before Prague-TL00AC01B223 have an information exposure vulnerability. When the user's smart phone connects to the malicious device for charging, an unauthenticated attacker may activate some specific function by sending some specially crafted messages. Due to insufficient input validation of the messages, successful exploit may cause information exposure.

Affected (7)

7 products
Berlin L21hn Firmware
Prague Al00a Firmware
Prague Al00b Firmware
Prague Al00c Firmware
Prague L31 Firmware
Prague Tl00a Firmware
Prague Tl10a Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Before l21hnc185b381
Running on/withPlatform Versions
Huawei
Berlin L21hn
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Before al00ac00b223
Running on/withPlatform Versions
Huawei
Prague Al00a
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Before al00bc00b223
Running on/withPlatform Versions
Huawei
Prague Al00b
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Before al00cc00b223
Running on/withPlatform Versions
Huawei
Prague Al00c
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Before l31c432b208
Running on/withPlatform Versions
Huawei
Prague L31
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Before tl00ac01b223
Running on/withPlatform Versions
Huawei
Prague Tl00a
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Before tl00ac01b223
Running on/withPlatform Versions
Huawei
Prague Tl10a
All versions

References (2)

Timeline

No history available yet.