Vulnerability CVE-2017-8172


Published: 2017-11-22

Description:
Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a out-of-bounds array access that results in smart phone restart.

Type:

CWE-129

(Improper Validation of Array Index)

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.1/10
6.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete

 References:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170628-01-isub-en
http://www.securityfocus.com/bid/99370

Copyright 2024, cxsecurity.com

 

Back to Top