CVE-2017-15322

Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insufficient input validation. An attacker could exploit this vulnerability by sending specially crafted NFC messages to the target device. Successful exploit could make a service crash.

Score

CVSS 3.0 6.5 Medium

Status

Modified - psirt@huawei.com

Published

2017-12-22

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Baggio-l03a Firmware (Huawei)
• Baggio-l03a (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-nfc-en