cbcvebase.
CVE-2017-17171
published 2018-06-01

CVE-2017-17171: Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target…

PriorityP413medium4.2CVSS 3.0
AVLACLPRHUIRSUCNINAH
EPSS
0.47%
37.9th percentile
Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
huaweimate_8_firmware< nxt-al10c00b593nxt-al10c00b593
huaweimate_8_firmware< nxt-cl00c92b593nxt-cl00c92b593
huaweimate_8_firmware< nxt-dl00c17b593nxt-dl00c17b593
huaweimate_8_firmware< nxt-l09c636b598anxt-l09c636b598a
huaweimate_8_firmware< nxt-l09c185b583nxt-l09c185b583
huaweimate_8_firmware< nxt-l09c432b582nxt-l09c432b582
huaweimate_8_firmware< nxt-l09c605b585custc605d590nxt-l09c605b585custc605d590
huaweimate_8_firmware< nxt-l29c10b583nxt-l29c10b583
huaweimate_8_firmware< nxt-l29c185b585nxt-l29c185b585
huaweimate_8_firmware< nxt-l29c636b594anxt-l29c636b594a
huaweimate_8_firmware< nxtl00c01b593nxtl00c01b593
huaweip9_firmware< eva-al00c00b398eva-al00c00b398
huaweip9_firmware< eva-al10c00b398eva-al10c00b398
huaweip9_firmware< eva-cl00c92b398eva-cl00c92b398
huaweip9_firmware< eva-dl00c17b398eva-dl00c17b398
huaweip9_firmware< eva-l09c185b391eva-l09c185b391
huaweip9_firmware< eva-l09c432b395eva-l09c432b395
huaweip9_firmware< eva-l09c464b383eva-l09c464b383
huaweip9_firmware< eva-l09c605b392eva-l09c605b392
huaweip9_firmware< eva-l19c10b394eva-l19c10b394
huaweip9_firmware< eva-l19c432b392eva-l19c432b392
huaweip9_firmware< eva-l19c605b390eva-l19c605b390
huaweip9_firmware< eva-l19c636b393eva-l19c636b393
huaweip9_firmware< eva-l29c636b389eva-l29c636b389
huaweip9_firmware< eva-tl00c01b398eva-tl00c01b398

CVSS provenance

nvdv3.04.2MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
nvdv2.06.3MEDIUMAV:N/AC:M/Au:S/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.