CVE-2017-17158
Some Huawei smart phones with the versions before Berlin-L21HNC185B381; the versions before Prague-AL00AC00B223; the versions before Prague-AL00BC00B223; the versions before Prague-AL00CC00B223; the versions before Prague-L31C432B208; the versions before Prague-TL00AC01B223; the versions before Prague-TL00AC01B223 have an information exposure vulnerability. When the user's smart phone connects to the malicious device for charging, an unauthenticated attacker may activate some specific function by sending some specially crafted messages. Due to insufficient input validation of the messages, successful exploit may cause information exposure.
Published:May 24, 2018
Last Modified:Nov 21, 2024
EPS:May 24, 2018
EPSS Score:0.0003
CVSS Score:4.6
Affected Products
Vendor
Product
Action
Vendor
Huawei
Product
Berlin-l21hn
Huawei
Berlin-l21hn
Vendor
Huawei
Product
Berlin-l21hn Firmware
Huawei
Berlin-l21hn Firmware
Vendor
Huawei
Product
Prague-al00a
Huawei
Prague-al00a
Vendor
Huawei
Product
Prague-al00a Firmware
Huawei
Prague-al00a Firmware
Vendor
Huawei
Product
Prague-al00b
Huawei
Prague-al00b
Vendor
Huawei
Product
Prague-al00b Firmware
Huawei
Prague-al00b Firmware
Vendor
Huawei
Product
Prague-al00c
Huawei
Prague-al00c
Vendor
Huawei
Product
Prague-al00c Firmware
Huawei
Prague-al00c Firmware
Vendor
Huawei
Product
Prague-l31
Huawei
Prague-l31
Vendor
Huawei
Product
Prague-l31 Firmware
Huawei
Prague-l31 Firmware
Vendor
Huawei
Product
Prague-tl00a
Huawei
Prague-tl00a
Vendor
Huawei
Product
Prague-tl00a Firmware
Huawei
Prague-tl00a Firmware
Vendor
Huawei
Product
Prague-tl10a
Huawei
Prague-tl10a
Vendor
Huawei
Product
Prague-tl10a Firmware
Huawei
Prague-tl10a Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
