← Back

CVE-2017-17280

nvd nist
Published: Mar 9, 2018Modified: Nov 21, 2024

JSON object

Loading...
3.5
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Exploitability: 2.1 / Impact: 1.4
Source: NVD

Description

NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability. The attacker has to trick a user to do some specific operations and then craft the NFC message to exploit this vulnerability. Successful exploit will cause some information leak.

Affected (1)

Huawei
1 product
Lon Al00b Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Lon Al00b Firmware
Version lon-al00bc00
Running on/withPlatform Versions
Huawei
Lon Al00b
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.