CVE-2017-8214

CWE-287 — Improper Authentication3 documents3 sources
Severity
6.2MEDIUM
EPSS
0.0%
top 96.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Huawei Honor 8 FirmwareHuawei Honor 9 FirmwareHuawei Honor V8 Firmware+6 more
Timeline
PublishedNov 22
Latest updateMay 13

Description

Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Du…

CVSS vector

CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.3 | Impact: 5.9

Affected Packages9 packages

▶NVDhuawei/honor_8_firmware< frd-al00c00b391+1
▶NVDhuawei/honor_9_firmware< stanford-al00c00b175+2
▶NVDhuawei/honor_v8_firmware< knt-al10c00b391+3
▶NVDhuawei/honor_v9_firmware< duke-al20c00b191+1
▶NVDhuawei/nova_2_plus_firmware< barca-al00c00b162+1

🔴Vulnerability Details

2
GHSA
GHSA-v494-p7p8-9c4w: Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, v↗2022-05-13
▶
CVEList
CVE-2017-8214: Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, v↗2017-11-22
▶
CVE-2017-8214 (MEDIUM CVSS 6.2) | Honor 8,Honor V8,Honor 9,Honor V9,N | cvebase.io