Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-17171


Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 4.2, requiring local system access to exploit with relatively low complexity though user interaction is required . The vulnerability impacts and availability (service disruption) for affected systems. Impacting 6 products from huawei, from huawei, from huawei and 3 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2018, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.


Published

2018-06-01T14:29:00.207

Last Modified

2024-11-21T03:17:38.477

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 4.2 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

6.8

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-20

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei mate_8_firmware < nxt-al10c00b593 Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxt-cl00c92b593 Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxt-dl00c17b593 Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxt-l09c636b598a Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxt-l09c185b583 Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxt-l09c432b582 Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxt-l09c605b585custc605d590 Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxt-l29c10b583 Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxt-l29c185b585 Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxt-l29c636b594a Yes
Hardware huawei mate_8 - No
Operating System huawei mate_8_firmware < nxtl00c01b593 Yes
Hardware huawei mate_8 - No
Operating System huawei p9_firmware < eva-al00c00b398 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-al10c00b398 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-cl00c92b398 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-dl00c17b398 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-l09c185b391 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-l09c432b395 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-l09c464b383 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-l09c605b392 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware ≤ eva-l09c636b388 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-l19c10b394 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-l19c432b392 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-l19c605b390 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-l19c636b393 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-l29c636b389 Yes
Hardware huawei p9 - No
Operating System huawei p9_firmware < eva-tl00c01b398 Yes
Hardware huawei p9 - No
Operating System huawei p9_plus_firmware < vie-l09c318b182 Yes
Hardware huawei p9_plus - No
Operating System huawei p9_plus_firmware < vie-l09c432b380 Yes
Hardware huawei p9_plus - No
Operating System huawei p9_plus_firmware < vie-l09c576b180 Yes
Hardware huawei p9_plus - No
Operating System huawei p9_plus_firmware < vie-l29c605b370 Yes
Hardware huawei p9_plus - No
Operating System huawei p9_plus_firmware < vie-l29c636b388 Yes
Hardware huawei p9_plus - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For huawei's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.