CVEvulnerability

CVE-2017-17159

6.5 MEDIUM Published 2018-02-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-02-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
6.1 MEDIUM — AV:A/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.

Affected configurations

• huawei mt8-emui4.1 firmware nxt-al10c00b386 • huawei mt8-emui4.1 firmware nxt-cl00c92b386 • huawei mt8-emui4.1 firmware nxt-dl00c17b386 • huawei mt8-emui4.1 firmware nxt-tl00c01b386sp01 • huawei nts-al00 firmware nts-al00c00b535

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References