Security Advisory - DoS Vulnerability in Some Huawei Smart Phones
- SA No:huawei-sa-20171220-02-smartphone
- Initial Release Date: Dec 20, 2017
- Last Release Date: Dec 20, 2017
Some Huawei smart phones have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart. (Vulnerability ID: HWPSIRT-2017-07148)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-17159.http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-smartphone-en
|
Product Name |
Affected Version |
Resolved Product and Version |
|
MT8-EMUI4.1 |
NXT-AL10C00B386 |
NXT-AL10C00B592 |
|
NXT-CL00C92B386 |
NXT-CL00C92B592 |
|
|
NXT-DL00C17B386 |
NXT-DL00C17B592 |
|
|
NXT-TL00C01B386SP01 |
NXT-TL00C01B592 |
|
|
NTS-AL00 |
NTS-AL00C00B535 |
NTS-AL00C00B539 |
Successful exploit could make the smart phone restart.
Base Score: 6.5 (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Temporal Score: 6.0 (E:F/RL:O/RC:C)
The attacker should be within radio range to vulnerable smart phone.
Vulnerability details:
An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.
Customers should contact Huawei TAC (Huawei Technical Assistance Center) to request the upgrades. For TAC contact information, please refer to Huawei worldwide website at http://www.huawei.com/en/psirt/report-vulnerabilities.
None
Huawei adheres to protecting the ultimate interests of users with best efforts and the principle of responsible disclosure and deal with product security issues through our response mechanism.
To enjoy Huawei PSIRT services and obtain Huawei product vulnerability information, please visit http://www.huawei.com/en/psirt.
To report a security vulnerability in Huawei products and solutions, please send it to PSIRT@huawei.com. For details, please visit http://www.huawei.com/en/psirt/report-vulnerabilities.
