CVE-2017-8164

Published: Mar 5, 2018Modified: Nov 21, 2024

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171; EVA-L09IRLC368B160; EVA-L19C10B190; EVA-L19C185B220; EVA-L19C20B160; EVA-L19C432B210; EVA-L19C636B190; EVA-L29C20B160; EVA-L29C636B191; EVA-TL00C01B198; VIE-L09C02B131; VIE-L09C109B181; VIE-L09C113B170; VIE-L09C150B170; VIE-L09C25B120; VIE-L09C40B181; VIE-L09C432B181; VIE-L09C55B170; VIE-L09C605B131; VIE-L09ITAC555B130; VIE-L29C10B170; VIE-L29C185B181; VIE-L29C605B131; VIE-L29C636B202 have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation can cause camera application unusable.

Affected (51)

Products: Huawei: Eva Al10 Firmware, Eva Cl00 Firmware, Eva Dl00 Firmware, Eva L09 Firmware, Eva L19 Firmware, Eva L29 Firmware, Eva Tl00 Firmware, Vie L09 Firmware, Vie L29 Firmware

9 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Eva Al10 Firmware	Version eva-al10c00b198

Running on/with	Platform Versions
Huawei Eva Al10	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Eva Cl00 Firmware	Version eva-cl00c92b198

Running on/with	Platform Versions
Huawei Eva Cl00	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Eva Dl00 Firmware	Version eva-dl00c17b198

Running on/with	Platform Versions
Huawei Eva Dl00	All versions

Configuration D

26 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Eva L09 Firmware	Version eva-l09c02b143
Huawei Eva L09 Firmware	Version eva-l09c09b150
Huawei Eva L09 Firmware	Version eva-l09c109b196
Huawei Eva L09 Firmware	Version eva-l09c113b150
Huawei Eva L09 Firmware	Version eva-l09c150b192
Huawei Eva L09 Firmware	Version eva-l09c178b161
Huawei Eva L09 Firmware	Version eva-l09c185b180
Huawei Eva L09 Firmware	Version eva-l09c22b140
Huawei Eva L09 Firmware	Version eva-l09c25b133
Huawei Eva L09 Firmware	Version eva-l09c33b191
Huawei Eva L09 Firmware	Version eva-l09c34b142
Huawei Eva L09 Firmware	Version eva-l09c40b196
Huawei Eva L09 Firmware	Version eva-l09c432b210
Huawei Eva L09 Firmware	Version eva-l09c440b138
Huawei Eva L09 Firmware	Version eva-l09c464b150
Huawei Eva L09 Firmware	Version eva-l09c530b127
Huawei Eva L09 Firmware	Version eva-l09c55b190
Huawei Eva L09 Firmware	Version eva-l09c576b150
Huawei Eva L09 Firmware	Version eva-l09c635b221
Huawei Eva L09 Firmware	Version eva-l09c636b193
Huawei Eva L09 Firmware	Version eva-l09c675b130
Huawei Eva L09 Firmware	Version eva-l09c688b143
Huawei Eva L09 Firmware	Version eva-l09c703b160
Huawei Eva L09 Firmware	Version eva-l09c706b145
Huawei Eva L09 Firmware	Version eva-l09gbrc555b171
Huawei Eva L09 Firmware	Version eva-l09irlc368b160

Running on/with	Platform Versions
Huawei Eva L09	All versions

Configuration E

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Eva L19 Firmware	Version eva-l19c10b190
Huawei Eva L19 Firmware	Version eva-l19c185b220
Huawei Eva L19 Firmware	Version eva-l19c20b160
Huawei Eva L19 Firmware	Version eva-l19c432b210
Huawei Eva L19 Firmware	Version eva-l19c636b190

Running on/with	Platform Versions
Huawei Eva L19	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Eva L29 Firmware	Version eva-l29c20b160
Huawei Eva L29 Firmware	Version eva-l29c636b191

Running on/with	Platform Versions
Huawei Eva L29	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Eva Tl00 Firmware	Version eva-tl00c01b198

Running on/with	Platform Versions
Huawei Eva Tl00	All versions

Configuration H

10 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Vie L09 Firmware	Version vie-l09c02b131
Huawei Vie L09 Firmware	Version vie-l09c109b181
Huawei Vie L09 Firmware	Version vie-l09c113b170
Huawei Vie L09 Firmware	Version vie-l09c150b170
Huawei Vie L09 Firmware	Version vie-l09c25b120
Huawei Vie L09 Firmware	Version vie-l09c40b181
Huawei Vie L09 Firmware	Version vie-l09c432b181
Huawei Vie L09 Firmware	Version vie-l09c55b170
Huawei Vie L09 Firmware	Version vie-l09c605b131
Huawei Vie L09 Firmware	Version vie-l09itac555b130

Running on/with	Platform Versions
Huawei Vie L09	All versions

Configuration I

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Vie L29 Firmware	Version vie-l29c10b170
Huawei Vie L29 Firmware	Version vie-l29c185b181
Huawei Vie L29 Firmware	Version vie-l29c605b131
Huawei Vie L29 Firmware	Version vie-l29c636b202

Running on/with	Platform Versions
Huawei Vie L29	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-smartphone-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-smartphone-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.