CVE-2017-8175
The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.
- Score
- CVSS 3.0 5.5 Medium
- Status
- Modified - psirt@huawei.com
- Published
- 2017-11-22
- Last modified
- 2024-09-16
- Weaknesses
- CWE-20
Affected products
- Vicky-al00a (Huawei)
- Victoria-al00a (Huawei)
- Warsaw-al00 (Huawei)
- Vicky-al00avictoria-al00awarsaw-al00 (Huawei Technologies Co. Ltd.)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-02-smartphone-en
