CVE-2017-8175

MEDIO 5.5CVE-2017-8175 · Published 22/11/2017 · updated 17/06/2026

In breve

CVE-2017-8175 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda vicky-al00a (huawei), victoria-al00a (huawei), warsaw-al00 (huawei).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.55%, superiore al 46.0% delle vulnerabilità.
Correzione: aggiornare a vicky-al00ac00b167, victoria-al00ac00b167, warsaw-al00c00b191 o successiva.

Package	Affected versions	Patched versions
vicky-al00a huawei	`< vicky-al00ac00b167`	`vicky-al00ac00b167`
victoria-al00a huawei	`< victoria-al00ac00b167`	`victoria-al00ac00b167`
warsaw-al00 huawei	`< warsaw-al00c00b191`	`warsaw-al00c00b191`

Description

The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.

References

huawei.com/en/psirt/security-advisories/huawei-sa-20170802-02-smartphone-en · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free